<p>I would not consider generating the wallet as the primary security related issue, what i consider more important is the proper storage and encryption of your generated wallet. If you use open source wallets you will most likely be save.</p>
<p>I also thought about this a while ago and stumbled upon this guide for diy cold storage:</p>
<p><a href="https://steemit.com/crypto/@guidedcrypto/diy-make-your-own-crypto-hardware-wallet" rel="nofollow noreferrer">https://steemit.com/crypto/@guidedcrypto/diy-make-your-own-crypto-hardware-wallet</a></p>
<p>In essence it tells you how to create your cold storage which is:</p>
<ul>
<li>create your wallets (advice is to use official ones, but you can use any you choose) to the usb-thumbdrive</li>
<li>store your access keys and passwords to the usb-thumbdrive</li>
<li>test all is working</li>
<li>encrypt everything to make it immutable (like this, malware or viruses have no chance destroying it and you are locking unauthorized people out)</li>
<li>store the encryption key somewhere save (offline, please use long keys which are random to make it difficult to guess or brute force)</li>
</ul>
<p>If you are paranoid about not catching viruses or other tempering you could do all of this from a live open source linux disto of your choice as to be sure nothing was altered in the OS. (it runs off RAM and basically gets recreated from scratch every time you start it)</p>
<p>I personally consider VM's not to be save as there have been security related issues with some VM infrastructure and the separation is not absolute from the base system.</p>

CC BY-SA 4.0
2022-01-14T14:54:16.883Z
As my journey in crypto assets progressed, i'am now a firm advocate of hardware wallets and i'm using a ledger nano x, the brilliance is that you generate your privat key completely offline and only connect wallets to it with the public key, any transaction needs to be confirmed on the device (your privat keys can only be regenerated by the initial seed phrase which you can keep offline)
AnafiFlyer
CC BY-SA 4.0
2021-01-14T07:06:30.400Z
2021-01-14T07:06:30.400Z
AnafiFlyer
<p>A reputable hardware wallet is generally considered the best way for most users.</p>
<p>BIP39 refers to the mnemonic recovery phrase, but BIP39 wallets still use the BIP32 architecture.</p>
<p>The questions about why BIP39 is not implemented in bitcoin-core has already been answered (<a href="https://bitcoin.stackexchange.com/questions/88237/is-there-a-reason-to-why-bitcoin-core-does-not-implement-bip39">Is there a reason to why Bitcoin Core does not implement BIP39?</a>)</p>

CC BY-SA 4.0
2021-01-13T04:43:04.550Z
2021-01-13T04:43:04.550Z
m1xolyd1an
<p>I am trying to create a cold storage, and I'm becoming so paranoid about everything on software and hardware (also afraid of myself forgetting/losing the wallet) related to the setup.</p>
<p>I have read some information online about cold storage setup, and I have come up with these questions:</p>
<ol>
<li>What is the safest way to generate bitcoin wallet? From the existing software such as bitcoin-core? electrum? (I thought of writing my own codes to generate bitcoin wallet, but there are so many types of bitcoin wallet BIP32, BIP39, etc which makes me think that it's not a good idea to do so)</li>
<li>How are we sure that bitcoin-core and electrum is generating a safe wallet? (not pre-seeded)</li>
<li>Which standard is the safest way to generate bitcoin wallet? BIP32, BIP39?</li>
<li>Does bitcoin-core uses BIP32 to generate the wallet? if not, which one does it use?</li>
<li>Does electrum uses BIP39 to generate the wallet? if not, which one does it use? (I read that electrum is using an extended BIP39.</li>
<li>I also read that bitcoin-core is not using BIP39 because it is not sure, but why BIP39 is still used in many wallets?</li>
<li>Is it possible that a hardware (CPU, motherboard, SSD, old computer that has been used by me before) is infected with a malware (from previous use or even from the manufacturer)? This malware might be able to mess with the entropy and create something like a pre-seeded wallet?</li>
</ol>
<p>Thank You</p>

<bitcoin-core><wallet><electrum><wallet-security><coldstorage>
What is the best way to generate bitcoin wallet?
bbnn
# What is the best way to generate bitcoin wallet?

(Asked by: username_0 on 2021-01-12)

I am trying to create a cold storage, and I'm becoming so paranoid about everything on software and hardware (also afraid of myself forgetting/losing the wallet) related to the setup.

I have read some information online about cold storage setup, and I have come up with these questions:

1. What is the safest way to generate bitcoin wallet? From the existing software such as bitcoin-core? electrum? (I thought of writing my own codes to generate bitcoin wallet, but there are so many types of bitcoin wallet BIP32, BIP39, etc which makes me think that it's not a good idea to do so)
2. How are we sure that bitcoin-core and electrum is generating a safe wallet? (not pre-seeded)
3. Which standard is the safest way to generate bitcoin wallet? BIP32, BIP39?
4. Does bitcoin-core uses BIP32 to generate the wallet? if not, which one does it use?
5. Does electrum uses BIP39 to generate the wallet? if not, which one does it use? (I read that electrum is using an extended BIP39.
6. I also read that bitcoin-core is not using BIP39 because it is not sure, but why BIP39 is still used in many wallets?
7. Is it possible that a hardware (CPU, motherboard, SSD, old computer that has been used by me before) is infected with a malware (from previous use or even from the manufacturer)? This malware might be able to mess with the entropy and create something like a pre-seeded wallet?

Thank You

**Tags:** bitcoin-core, wallet, electrum, wallet-security, coldstorage


---

## 2 answers

### Answer by username_1 on 2021-01-14. Score: 0 | Accepted answer

I would not consider generating the wallet as the primary security related issue, what i consider more important is the proper storage and encryption of your generated wallet. If you use open source wallets you will most likely be save.

I also thought about this a while ago and stumbled upon this guide for diy cold storage:

<https://steemit.com/crypto/@guidedcrypto/diy-make-your-own-crypto-hardware-wallet>

In essence it tells you how to create your cold storage which is:

* create your wallets (advice is to use official ones, but you can use any you choose) to the usb-thumbdrive
* store your access keys and passwords to the usb-thumbdrive
* test all is working
* encrypt everything to make it immutable (like this, malware or viruses have no chance destroying it and you are locking unauthorized people out)
* store the encryption key somewhere save (offline, please use long keys which are random to make it difficult to guess or brute force)

If you are paranoid about not catching viruses or other tempering you could do all of this from a live open source linux disto of your choice as to be sure nothing was altered in the OS. (it runs off RAM and basically gets recreated from scratch every time you start it)

I personally consider VM's not to be save as there have been security related issues with some VM infrastructure and the separation is not absolute from the base system.

> **Comments:**
> **username_1**: As my journey in crypto assets progressed, i'am now a firm advocate of hardware wallets and i'm using a ledger nano x, the brilliance is that you generate your privat key completely offline and only connect wallets to it with the public key, any transaction needs to be confirmed on the device (your privat keys can only be regenerated by the initial seed phrase which you can keep offline)  

---

### Answer by username_2 on 2021-01-13. Score: 1

A reputable hardware wallet is generally considered the best way for most users.

BIP39 refers to the mnemonic recovery phrase, but BIP39 wallets still use the BIP32 architecture.

The questions about why BIP39 is not implemented in bitcoin-core has already been answered ([Is there a reason to why Bitcoin Core does not implement BIP39?](https://bitcoin.stackexchange.com/questions/88237/is-there-a-reason-to-why-bitcoin-core-does-not-implement-bip39))


---

