<p>The safest way to use blockchain.info is to not let it have any private keys until it needs them.  If your coins are [really] in cold storage then you can log onto your blockchain.info wallet with zero risk.  When you are ready to spend, import the private key(s) into blockchain.info.  At this point you are at risk until you spend and then store any remainder back into cold storage.</p>

<p>This will limit how much someone could steal and it's pretty easy.  However for large transactions a Windows box should never be used because with all the potential attack vectors it's just too risky.</p>

CC BY-SA 3.0
2014-06-01T02:46:17.323Z
2014-06-01T02:46:17.323Z
Anono Mouser
<p>Please help. I have finally set up my cold storage system for but I am too paranoid to login to blockchain.info wallet to send the funds out.</p>

<p>Let's assume the account is safe and protected from most attacks at this very moment (strong passwords + graphical keyboard, 2FA, using secure network, no online backups sitting somewhere). Let's also assume bc itself can be trusted.</p>

<p>So I feel the wallet is relatively safe just "sitting there" but I am still concerned about attacks during the actual login and while I am sending transactions.</p>

<p><strong>- Would the chrome app or firefox extension be safer than logging in and out of their URL?</strong></p>

<p><strong>-Is it a bad idea to use TORBROWSER? Can an exit node still sniff my data if I'm using https? What about the FF extension AND torbrowser together.</strong></p>

<p><strong>-Even if I take advantage of all best security practices on the wallet itself, my physical system, and my personal network... WHAT OTHER <em>REALISTIC</em> VECTORS SHOULD I BE AWARE OF?</strong></p>

<p>Thank you so much. Security is a huge hurdle for all of us…I hope that others can benefit from your answers.</p>

<wallet><security><blockchain.info>
Safest method while actually logging in and using blockchain.info wallet
Shorganical
# Safest method while actually logging in and using blockchain.info wallet

(Asked by: username_0 on 2014-03-01)

Please help. I have finally set up my cold storage system for but I am too paranoid to login to blockchain.info wallet to send the funds out.

Let's assume the account is safe and protected from most attacks at this very moment (strong passwords + graphical keyboard, 2FA, using secure network, no online backups sitting somewhere). Let's also assume bc itself can be trusted.

So I feel the wallet is relatively safe just "sitting there" but I am still concerned about attacks during the actual login and while I am sending transactions.

**- Would the chrome app or firefox extension be safer than logging in and out of their URL?**

**-Is it a bad idea to use TORBROWSER? Can an exit node still sniff my data if I'm using https? What about the FF extension AND torbrowser together.**

**-Even if I take advantage of all best security practices on the wallet itself, my physical system, and my personal network... WHAT OTHER *REALISTIC* VECTORS SHOULD I BE AWARE OF?**

Thank you so much. Security is a huge hurdle for all of us…I hope that others can benefit from your answers.

**Tags:** wallet, security, blockchain.info


---

## 1 answers

### Answer by username_1 on 2014-06-01. Score: 1

The safest way to use blockchain.info is to not let it have any private keys until it needs them. If your coins are [really] in cold storage then you can log onto your blockchain.info wallet with zero risk. When you are ready to spend, import the private key(s) into blockchain.info. At this point you are at risk until you spend and then store any remainder back into cold storage.

This will limit how much someone could steal and it's pretty easy. However for large transactions a Windows box should never be used because with all the potential attack vectors it's just too risky.


---

