<p>It is possible that someone at Google may use that information to steal your bitcoins, but it is <em>extremely</em> unlikely.</p>

CC BY-SA 3.0
2015-12-05T01:11:33.253Z
2015-12-05T01:11:33.253Z
gw90
<p>It'd be a huge violation of user trust if a Google employee looked at customer data and did something like that, so I'd say extremely unlikely.</p>

<p>That said, you shouldn't ever put your private keys on the internet.</p>

<p>Lastly, if this did happen and it involved any substantial amount of money, Google would be able to determine which employee accessed your data, which you could then very likely use in civil court to recover your stolen BTC.</p>

<p>Disclaimer: I work at Google.</p>

CC BY-SA 3.0
2015-12-05T02:10:25.470Z
So there can't be a middle man in between me and the server where the note was stored? Also how long does it take from when the time the clicked delete on that note and when it is actually deleted for real?
Riley Potts
CC BY-SA 3.0
2015-12-05T03:45:48.800Z
There cannot be middleman, because all Google connections are HTTPS encrypted nowadays. If you want to be sure you can always move coins to a different address, though. That is more safe than deleting the note, as you have 100% control over the operation.
Mikko Ohtamaa
CC BY-SA 3.0
2015-12-05T04:50:40.657Z
The same argument goes for storing your money at a bank.
Pieter Wuille
CC BY-SA 3.0
2015-12-06T16:22:54.947Z
I agree with @MikkoOhtamaa about the man-in-the-middle attack. SSL should solve that problem for you.

Google also (now) encrypts even more due to that whole Prism thing: https://www.eff.org/deeplinks/2013/10/prism-is-not-enough
JJ Geewax
CC BY-SA 3.0
2015-12-06T16:23:28.820Z
@RileyPotts: I don't think it's safe to say "how long it takes" for something to be *fully* deleted, as that's actually a really complicated question.

The general gist here is: it's a bad idea to put your private key anywhere on the internet (Google or not). If you did this already, just move your coins to a new address, and the problem goes away. If you want a safe back-up, consider a BIP38 encrypted paper wallet in a safety deposit box (https://bitcoinpaperwallet.com/bip38-password-encrypted-wallets/)
JJ Geewax
CC BY-SA 3.0
2015-12-05T01:30:22.213Z
2015-12-05T01:30:22.213Z
JJ Geewax
<p>A while ago I put all my addresses with private keys (although they did not have that much money in them) onto a google keep note. I put it on a password protected notepad on my phone now, but could anyone have stolen them from my google keep note?</p>

<security>
Can google steal my Bitcoins if I store the private key in Google Keep note
Riley Potts
# Can google steal my Bitcoins if I store the private key in Google Keep note

(Asked by: username_0 on 2015-12-05)

A while ago I put all my addresses with private keys (although they did not have that much money in them) onto a google keep note. I put it on a password protected notepad on my phone now, but could anyone have stolen them from my google keep note?

**Tags:** security


---

## 2 answers

### Answer by username_2 on 2015-12-05. Score: 4 | Accepted answer

It'd be a huge violation of user trust if a Google employee looked at customer data and did something like that, so I'd say extremely unlikely.

That said, you shouldn't ever put your private keys on the internet.

Lastly, if this did happen and it involved any substantial amount of money, Google would be able to determine which employee accessed your data, which you could then very likely use in civil court to recover your stolen BTC.

Disclaimer: I work at Google.

> **Comments:**
> **username_0**: So there can't be a middle man in between me and the server where the note was stored? Also how long does it take from when the time the clicked delete on that note and when it is actually deleted for real?  
> **username_3**: There cannot be middleman, because all Google connections are HTTPS encrypted nowadays. If you want to be sure you can always move coins to a different address, though. That is more safe than deleting the note, as you have 100% control over the operation.  
> **username_4**: The same argument goes for storing your money at a bank.  
> **username_2**: I agree with @username_3 about the man-in-the-middle attack. SSL should solve that problem for you.  Google also (now) encrypts even more due to that whole Prism thing: https://www.eff.org/deeplinks/2013/10/prism-is-not-enough  
> **username_2**: @username_0: I don't think it's safe to say "how long it takes" for something to be *fully* deleted, as that's actually a really complicated question.  The general gist here is: it's a bad idea to put your private key anywhere on the internet (Google or not). If you did this already, just move your coins to a new address, and the problem goes away. If you want a safe back-up, consider a BIP38 encrypted paper wallet in a safety deposit box (https://bitcoinpaperwallet.com/bip38-password-encrypted-wallets/)  

---

### Answer by username_1 on 2015-12-05. Score: 0

It is possible that someone at Google may use that information to steal your bitcoins, but it is *extremely* unlikely.


---

