Safe and effective wallet recovery with multiple accounts

19 replies 226 views
alt21Senior Member
Posts: 398 · Reputation: 1732
#1Jun 15, 2017, 11:00 PM
Hey everyone. Here’s the deal: I just set up an offline wallet. My plan is to keep an eye on the UTXOs and create addresses as needed. I’ll be using 2 accounts: Account 1: KYC bitcoins. (m/84'/0'/0') Account 2: Non-KYC or Mixed bitcoins. (m/84'/0'/1') I’ve got some questions for you all. Imagine it’s 20 years down the line, and I pull out my seed phrase to get back into my wallet. 1. How can I figure out how many accounts I’ve ever created and funded? I know about my 2 accounts, but what if I had a 3rd account I forgot? If I handed my seed phrase to my kid and told them to recover it, how would they know how many accounts have actual funds? 2. Is there a way to safely keep track of or back up the number of accounts I’ve created with my recovery phrase?
5 Reply Quote Share
pixel2014Hero Member
Posts: 857 · Reputation: 4132
#2Jun 15, 2017, 11:10 PM
You have to let them know about it. You can use practical example. It is you that should remember it. The only wallet that I noticed this is the non recommendable Coinomi which is close source. Most wallets do not allow it as they will allow you to create/use another seed phrase instead which is recommended. I prefer to use another seed phrase instead. If you want to use the same seed phrase, use passphrase to extend the seed phrase to generate you another different wallet (keys and addresses) entirely. If you lose your passphrase, it is also like you lose your seed phrase because you will need both (seed phrase and passphrase) to access your coins.
0 Reply Quote Share
alt21Senior Member
Posts: 398 · Reputation: 1732
#3Jun 16, 2017, 01:18 AM
I could do that, but in fact, I don't like dealing with multiple wallets. I mean, a new seed phrase for me would mean 2 additional backups. Personally I backup a singlesig wallet in 2 different locations. If I add another wallet, I will have this extra hassle, which I don't actually want. I already have a passphrase, so I would need to add another one, which again adds extra hassle in backing up everything.
0 Reply Quote Share
pixel2014Hero Member
Posts: 857 · Reputation: 4132
#4Jun 16, 2017, 05:04 AM
Exactly. If you use passphrase already, you can decided to add another passphrase to the seed phrase which will generate different wallet (keys and addresses) entirely. You can use more passphrase with the seed phrase and each will be generating different keys and addresses. All you have to do is to backup your passphrase differently in different locations and your seed phrase should be backed up differently as well. Having two strong passphrase and a seed phrase should not be hard for different location backup for each.
2 Reply Quote Share
alt21Senior Member
Posts: 398 · Reputation: 1732
#5Jun 16, 2017, 09:59 AM
No, you are definetely right. It's difficult to find different places though. This is my point. I 've been struggling a lot with it.
0 Reply Quote Share
humbleledgerLegendary
Posts: 1027 · Reputation: 6554
#6Jun 16, 2017, 10:01 PM
Can't you just write the number of accounts and derivation paths on the same paper with the seed phrase?
2 Reply Quote Share
mark_whaleSenior Member
Posts: 238 · Reputation: 968
#7Jun 16, 2017, 11:01 PM
If after 20 years a good wallet like electrum or sparrow is still there, you or your child will be able to load all the addresses containing the balances or UTXOs once you import the seed. By default, electrum or other wallets like sparrow wallet will load the first 20 receiving address in the order of the derivation path, and they will be able to see the addresses containing Bitcoins, so I don't think you should worry about how many addresses you generated and deposited bitcoins into in the past.
0 Reply Quote Share
alt21Senior Member
Posts: 398 · Reputation: 1732
#8Jun 17, 2017, 12:46 AM
Sure, but I will give extra food for thought to a potential attacker if they gain access to my seed phrase and, at the same time, it is difficult to update it if I need to add one more account or remove an old account etc. I will do it, eventually, but ... This is not strictly true. They will need to add it as a feature, at least for Sparrow which is the wallet app I use.
6 Reply Quote Share
humbleledgerLegendary
Posts: 1027 · Reputation: 6554
#9Jun 17, 2017, 05:11 AM
Whoever finds your seed phrase can try different derivation paths already. If that's what you're worried about, you can consider a password, I don't think the derivation path should be part of your security. Depending on how far you hide the seed phrase, adding new information is as simple as just writing on it.
1 Reply Quote Share
jake.chainSenior Member
Posts: 280 · Reputation: 1307
#10Jun 18, 2017, 06:10 PM
If you use some completely arbitrary derivation paths, then the only way you can recover those wallets is by either knowing/backing up the derivation path, or by blind brute force. If you use logical derivation paths as you have suggested (m/84'/0'/0', followed by m/84'/0'/1', followed by m/84'/0'/2', and so on), then there are various tools which will automatically scan these paths for you. The simplest way will be to import your seed phrase in to Electrum, and then hit the "Detect existing accounts" button. This will automatically check the 18 common derivation paths listed here for any transaction history. If it finds an active account it will automatically check the next account too. So after detecting activity at m/84'/0'/0', it will check m/84'/0'/1', and so on, until it reaches an inactive account. I would note  that using the same seed phrase and the same wallet software for both KYCed and non-KYCed accounts presents a huge risk to what you are trying to achieve. Recovering both accounts simultaneously will make it completely obvious to whichever third party server(s) you are connected to that all those coins are owned by the same individual. You should do this all via your own full node/server.
6 Reply Quote Share
alt21Senior Member
Posts: 398 · Reputation: 1732
#11Jun 18, 2017, 09:26 PM
I am talking about logical derivation paths, yes. In case I had arbitrary paths, I am curious to know how I would go about backing them up. On the same backup with my seed phrase? Separately? Any cool ideas? I run my own node and because of some mistakes I have made in the past, I use only one specific software for my wallet management, which is Sparrow. However, let's say I have 2 wallets on Sparrow. Different wallets, different seeds, different addresses etc. The problem you mention would still occur, if I was connected to a public electrum server.
3 Reply Quote Share
jake.chainSenior Member
Posts: 280 · Reputation: 1307
#12Jun 18, 2017, 10:55 PM
Write them down. If you use a totally crazy derivation path and back it up separately to your wallet, then it can act as a surrogate passphrase, as an attacker who finds your seed phrase would need to brute force potentially billions of combinations (depending on your derivation path) in order to steal your coins. I would also note, however, that loss of the derivation path would mean you also lose access to your wallets, and backing up a long string of random numbers is significantly more error prone than backing up a seed phrase. Correct, but people are simply more likely to restore the same seed phrase with different derivation paths in the same software on the same machine than they would be with two entirely different seed phrases.
1 Reply Quote Share
alt21Senior Member
Posts: 398 · Reputation: 1732
#13Jun 18, 2017, 11:55 PM
May I ask directly, and of course you may not answer. How do you deal with KYCed coins? I ask cause I want to get ideas. I 've been struggling with this issue really a lot. And at the end of the day, I think I shouldn't care all that much.
4 Reply Quote Share
jake.chainSenior Member
Posts: 280 · Reputation: 1307
#14Jun 19, 2017, 06:08 AM
By not owning any in the first place. (Probably not the answer you want to hear. ) I have never, and will never, complete KYC on any crypto platform. All the bitcoin I have ever bought have been bought through peer to peer trading without KYC. Having said that, I still have bitcoin from different sources which I do not want to link together, and so almost all the bitcoin I receive via any means goes straight to a mixer, a coinjoin, or a swap to monero. I use a variety of platforms to do all this, as well as different platforms to trade bitcoin, since if I only traded via a single platform and then always sent all my coins to the same privacy tool, then that provides another potential link. If you do own KYC bitcoin, then you have two options really. Do as I have done above to get rid of your KYCed bitcoin and end up with private bitcoin. The exchange that you bought the bitcoin from (and therefore the government and associated agencies) will still know you own x amount of bitcoin, but they won't be able to trace it. Or the better option - send your KYC bitcoin back to where you bought it from and sell it for fiat. You now have a clear record that you have sold all your bitcoin and no longer own any bitcoin. Take that fiat elsewhere and buy fresh non-KYCed bitcoins.
5 Reply Quote Share
alt21Senior Member
Posts: 398 · Reputation: 1732
#15Jun 19, 2017, 07:30 AM
Haha, yeah definetely not the answer I expected. All the friends I 've got have started buying BTC through exchanges. And I did too. It surprises me that as a beginner (when you were a beginner) you started buying through P2P trading. Congrats! Could I swap to monero now? And what would I do with the XMR I buy? I want BTC, not XMR. How would I re-buy BTC when I have XMR? I closed my Binance account. No more Binance for me. So I can't really do the second step. I can sell on robosats / bisq, but I am hesitant.
5 Reply Quote Share
jake.chainSenior Member
Posts: 280 · Reputation: 1307
#16Jun 19, 2017, 01:10 PM
You can either use a peer to peer exchange such as Bisq or AgoraDesk to swap with another person, or you can use an instant exchanger such as UnstoppableSwap or eXch. You'll find plenty more to choose from here: https://kycnot.me/?type=exchange So (using your own nodes and Tor) you swap your bitcoin to monero. Then you hold the monero for a while, maybe split it in to a few different wallets, maybe move it around a bit, and then use a different service to swap it back in to bitcoin in different amounts at different times. Since monero is untraceable, your new bitcoin will be unlinked to your old bitcoin. (Obviously don't swap all your bitcoin for monero, and then an hour later swap it all back again using the same service. Even though monero is untraceable, the bitcoin transactions will be fairly easily linked.) What is making you hesitant? Just that you've never used them before? Start out with small amounts and do a couple of "test trades" first to get a feel for things.
4 Reply Quote Share
alt21Senior Member
Posts: 398 · Reputation: 1732
#17Jun 19, 2017, 09:28 PM
I have no more merit man. You 've taken it all   Super helpful as always. thanks Does swapping in and out of LN with other people help? I mean send them on-chain, receive LN and vice-versa. I have used it a lot only as a buyer. I don't really know which should be my receiving method. For example, I hate giftcards (I don't know if it's just me). At the same time, I don't like SEPA or Revolut.
0 Reply Quote Share
jake.chainSenior Member
Posts: 280 · Reputation: 1307
#18Jun 19, 2017, 09:38 PM
I'm not sure. I do use Lightning, but not to anonymize coins. In theory, you will indeed be breaking the link between the bitcoin you send and the bitcoin you receive. But there are a lot of caveats to that: https://bitcoinmagazine.com/technical/state-of-bitcoin-lightning-network-privacy https://abytesjourney.com/lightning-privacy/ It's going to be better than nothing and just sending a regular on chain transaction, but I'm not convinced it's the panacea that some people believe it to be. If you don't want to use electronic methods, then that only really leaves cash in person or by mail. Depending on your country/jurisdiction, you may have options like a cash deposit to a bank account or a money order.
4 Reply Quote Share
alt21Senior Member
Posts: 398 · Reputation: 1732
#19Jun 19, 2017, 09:45 PM
Ok so, to coclude. I just started downloading Monero blockchain to run a monero node. I plan to: 1. Convert to Monero 1. Convert some bitcoin to monero using UnstoppableSwap. A friend of mine have used it and he will guide me, even though it must be trivial. He is full into monero at the moment. He believes in it. 2. Convert some bitcoin to monero using RoboSats.3. Convert some bitcoin to monero using Bisq. 2. Move Monero from wallet to wallet a bit 3. Do some LN Swaps using Bisq and Robosats 4. Sell some BTC for FIAT using Bisq and Robosats 5. Re-buy BTC with P2P using fiat and re-convert XMR to BTC using various services and exchanges and in smaller chunks. 6. Create fresh wallet (perhaps singlesig + passphrase) and start sending new coins there in various transactions and random times (not all in one hour for example.
3 Reply Quote Share
humbleledgerLegendary
Posts: 1027 · Reputation: 6554
#20Jun 20, 2017, 04:03 AM
Is this really worth all the transaction fees, just to "not have KYC coins"? Depending on who you're hiding from, the exchanges you used in the past will still have a pretty good idea you own crypto. They may not know your addresses, but that's it.
5 Reply Quote Share
?Reply
Sign in to reply to this topic

Related topics