<p>I would get a Tails USB and store the Armory application and wallet files in encrypted storage. That way not only can they not tie your addresses to you, but if you access bitcoin related sites only through Tails, it would be hard to show you even know anything about bitcoin.</p>

CC BY-SA 3.0
2014-10-15T00:37:30.683Z
Ya, I'd rather not have to restart my computer just to use bitcoins tho.
B T
CC BY-SA 3.0
2014-10-15T01:00:50.587Z
The main reason I recommended Tails is that it is very security hardened. You can secure your bitcoins from physical theft through encryption, but a key logger could easily steal you password and bypass the encryption.
Tyler
CC BY-SA 3.0
2014-10-15T01:03:52.093Z
If you still would like to use your normal OS, then in Linux you can create an encrypted directory with encfs. I don't know how to create one on win/osx. But Google does. Whatever your platform, just create an encrypted folder and store the armory files there.
Tyler
CC BY-SA 3.0
2014-10-15T07:11:20.863Z
Definitely both good ideas. If someone puts a key logger on my computer *and* steals all my files, I'm pretty screwed even if i have an encrypted directory tho. I need some bare-minimum convenience in my life tho, so I'm going to use encryption. I have a slightly different method I'll post as an answer.
B T
CC BY-SA 3.0
2014-10-15T07:18:13.033Z
That's what I meant. The key logger negates encryption, but Tails (or another very secure OS) prevents the key logger. And once you send bitcoin from the address, your public key is known anyway. So if you want to keep the public address secret, it can't be your convenience wallet anyway. IE, once you send overstock 1btc from your address, your public key is public *and* linked to your identity (shipping address and your name in overstock's database).
Tyler
CC BY-SA 3.0
2014-10-15T07:22:31.633Z
If I was going to spend btc frequently, I would have a sperate wallet kept at a bare minimum balance that is secured with a normal encryption/password scheme. This way, the address can be known publicly without it being known how much money you have and the larger part of your savings could be stored using the hypersecure but somewhat inconvenient method I described.
Tyler
CC BY-SA 3.0
2014-09-27T03:03:29.073Z
2014-09-27T21:03:03.640Z
2014-09-27T21:03:03.640Z
Tyler
<p>Tyler gave the most secure answer, but what I ended up deciding to do is the following:</p>

<ol>
<li>Create a wallet and save the backup</li>
<li>Re-encrypt the backup in an archive (I used 7zip) <strong>Update</strong>: 7zip has a couple security issues, and I can't recommend using it. It can leave unencrypted copies of encrypted files in temporary folders, and certain ways of adding a file into an encrypted directory can add it unencrypted and decrypt your filenames. The 7z protocol is great, but 7zip itself is shitty at encrypting stuff.</li>
<li>Delete the backup file with <a href="http://eraser.heidi.ie/" rel="nofollow">Eraser</a></li>
<li>Delete the 2 armory wallet files with Eraser (located in C:\Users\\AppData\Roaming\Armory on windows). One of the files will be named exactly the same thing as your backup, the other will be identical plus a "_backup" at the end of the filename. Make sure you don't delete the files for your other wallets.</li>
</ol>

<p>Whenever you need to use the wallet:</p>

<p>A. Open the archive and copy out the wallet
B. Restore the wallet in Armory
C. Use it, and once you're done..
D. Delete the copied out wallet with Eraser, and the 2 armory files as in steps 3 and 4 above</p>

<p>Again, this isn't as safe as Tyler's suggestion of using Tails, since you are copying something to the filesystem, and using a machine that maybe has some kind of virus. I opted to choose convenience over security in that regard here.</p>

CC BY-SA 3.0
2014-10-15T07:53:29.587Z
Not to keep nagging you with negativity, but in journaling filesystems like NTFS and most used by Linux, there is no guaranteed secure way to delete files apart from wiping the whole disk/partition. See the first post by Joel (who, I believe, is a developer of Eraser): http://eraser.heidi.ie/forum/viewtopic.php?f=2&t=5481
Tyler
CC BY-SA 3.0
2014-10-16T01:15:50.673Z
Jeez, can we live in the future already where people actually build well thought through OSs and programs? I just found out the program i've been using to encrypt (7zip) has left decrypted copies of my files in a temp folder. It sounds like i should look into an encrypted directory, since tails is too much trouble for me.
B T
CC BY-SA 3.0
2014-10-15T07:18:22.863Z
2014-10-16T01:23:22.497Z
2014-10-16T01:23:22.497Z
B T
<p>I would imagine that the paranoid darknety bitcoin user has an interest in keeping not only their private keys safe (so nobody can steal their bitcoins), but also has an interest in keeping their public keys safe (so nobody knows what addresses they control). With bitcoin armory, at least by default, a wallet's public information is available without any password protection when you load the program. Is there an option to encrypt all the wallet's information, so you can be safe in case, say, some jerk steals your computer and scrapes it for information about you?</p>

<security><encryption><armory>
Can you encrypt not just the private key, but also the public keys (ie bitcoin addresses) in an Armory wallet?
B T
# Can you encrypt not just the private key, but also the public keys (ie bitcoin addresses) in an Armory wallet?

(Asked by: username_0 on 2014-09-25)

I would imagine that the paranoid darknety bitcoin user has an interest in keeping not only their private keys safe (so nobody can steal their bitcoins), but also has an interest in keeping their public keys safe (so nobody knows what addresses they control). With bitcoin armory, at least by default, a wallet's public information is available without any password protection when you load the program. Is there an option to encrypt all the wallet's information, so you can be safe in case, say, some jerk steals your computer and scrapes it for information about you?

**Tags:** security, encryption, armory


---

## 2 answers

### Answer by username_1 on 2014-09-27. Score: 2

I would get a Tails USB and store the Armory application and wallet files in encrypted storage. That way not only can they not tie your addresses to you, but if you access bitcoin related sites only through Tails, it would be hard to show you even know anything about bitcoin.

> **Comments:**
> **username_0**: Ya, I'd rather not have to restart my computer just to use bitcoins tho.  
> **username_1**: The main reason I recommended Tails is that it is very security hardened. You can secure your bitcoins from physical theft through encryption, but a key logger could easily steal you password and bypass the encryption.  
> **username_1**: If you still would like to use your normal OS, then in Linux you can create an encrypted directory with encfs. I don't know how to create one on win/osx. But Google does. Whatever your platform, just create an encrypted folder and store the armory files there.  
> **username_0**: Definitely both good ideas. If someone puts a key logger on my computer *and* steals all my files, I'm pretty screwed even if i have an encrypted directory tho. I need some bare-minimum convenience in my life tho, so I'm going to use encryption. I have a slightly different method I'll post as an answer.  
> **username_1**: That's what I meant. The key logger negates encryption, but Tails (or another very secure OS) prevents the key logger. And once you send bitcoin from the address, your public key is known anyway. So if you want to keep the public address secret, it can't be your convenience wallet anyway. IE, once you send overstock 1btc from your address, your public key is public *and* linked to your identity (shipping address and your name in overstock's database).  
> **username_1**: If I was going to spend btc frequently, I would have a sperate wallet kept at a bare minimum balance that is secured with a normal encryption/password scheme. This way, the address can be known publicly without it being known how much money you have and the larger part of your savings could be stored using the hypersecure but somewhat inconvenient method I described.  

---

### Answer by username_0 on 2014-10-15. Score: 0

username_1 gave the most secure answer, but what I ended up deciding to do is the following:

1. Create a wallet and save the backup
2. Re-encrypt the backup in an archive (I used 7zip) **Update**: 7zip has a couple security issues, and I can't recommend using it. It can leave unencrypted copies of encrypted files in temporary folders, and certain ways of adding a file into an encrypted directory can add it unencrypted and decrypt your filenames. The 7z protocol is great, but 7zip itself is shitty at encrypting stuff.
3. Delete the backup file with [Eraser](http://eraser.heidi.ie/)
4. Delete the 2 armory wallet files with Eraser (located in C:\Users\\AppData\Roaming\Armory on windows). One of the files will be named exactly the same thing as your backup, the other will be identical plus a "\_backup" at the end of the filename. Make sure you don't delete the files for your other wallets.

Whenever you need to use the wallet:

A. Open the archive and copy out the wallet
B. Restore the wallet in Armory
C. Use it, and once you're done..
D. Delete the copied out wallet with Eraser, and the 2 armory files as in steps 3 and 4 above

Again, this isn't as safe as username_1's suggestion of using Tails, since you are copying something to the filesystem, and using a machine that maybe has some kind of virus. I opted to choose convenience over security in that regard here.

> **Comments:**
> **username_1**: Not to keep nagging you with negativity, but in journaling filesystems like NTFS and most used by Linux, there is no guaranteed secure way to delete files apart from wiping the whole disk/partition. See the first post by Joel (who, I believe, is a developer of Eraser): http://eraser.heidi.ie/forum/viewtopic.php?f=2&t=5481  
> **username_0**: Jeez, can we live in the future already where people actually build well thought through OSs and programs? I just found out the program i've been using to encrypt (7zip) has left decrypted copies of my files in a temp folder. It sounds like i should look into an encrypted directory, since tails is too much trouble for me.  

---

