BitShares Forum

Main => General Discussion => Topic started by: speedy on July 20, 2014, 11:22:57 am

Title: Is the password effectively a brain-wallet ?
Post by: speedy on July 20, 2014, 11:22:57 am
In the wiki it says that you have to create a 40+ character password, and save that to a USB stick / print it out.

http://wiki.bitshares.org/index.php/Bitshares-x-how-to

The password is therefore the private seed itself, and not just a way to secure a private key file.

Hasnt 5 years of Bitcoin shown us that people cant be trusted to created brain wallets ?
Title: Re: Is the password effectively a brain-wallet ?
Post by: voldemort628 on July 20, 2014, 11:31:51 am
i think you have to keep it as safe as how u keep your Nxt passphrase. cos basically thats the key to your money :)
Title: Re: Is the password effectively a brain-wallet ?
Post by: speedy on July 20, 2014, 11:43:30 am
i think you have to keep it as safe as how u keep your Nxt passphrase. cos basically thats the key to your money :)

Thats what I suspected.

Dont most people agree that in terms of security:

generated private key + passphrase > passphrase only
Title: Re: Is the password effectively a brain-wallet ?
Post by: xeroc on July 20, 2014, 11:54:44 am
I thought pwd is just for encryption and keys are random .. need clarificatiob from devs!!
Title: Re: Is the password effectively a brain-wallet ?
Post by: voldemort628 on July 20, 2014, 12:12:38 pm
Apparently the password is very important but whats the significance of it?
Title: Re: Is the password effectively a brain-wallet ?
Post by: Count of La Mancha on July 20, 2014, 02:07:01 pm
Password performs the same purpose as the password on your bit coin wallet, it encrypts the private keys on your disk.   Private keys are generated from random data by Open SSL and secure.

Your password strength only becomes an issue if someone hacks your computer and wants to brute force your wallet password to get your private keys.   This is very different from a weak brain wallet where anyone can attempt to brute force your keys without even having to have hacked your computer.
Title: Re: Is the password effectively a brain-wallet ?
Post by: speedy on July 20, 2014, 02:11:22 pm
Password performs the same purpose as the password on your bit coin wallet, it encrypts the private keys on your disk.   Private keys are generated from random data by Open SSL and secure.

Your password strength only becomes an issue if someone hacks your computer and wants to brute force your wallet password to get your private keys.   This is very different from a weak brain wallet where anyone can attempt to brute force your keys without even having to have hacked your computer.

Thanks for clearing this up - thats what I was hoping for. But then the wiki should be clarified that its not just your passphrase that you need to backup, but your wallet file as well.
Title: Re: Is the password effectively a brain-wallet ?
Post by: vikram on July 20, 2014, 10:07:06 pm
Password performs the same purpose as the password on your bit coin wallet, it encrypts the private keys on your disk.   Private keys are generated from random data by Open SSL and secure.

Your password strength only becomes an issue if someone hacks your computer and wants to brute force your wallet password to get your private keys.   This is very different from a weak brain wallet where anyone can attempt to brute force your keys without even having to have hacked your computer.

Thanks for clearing this up - thats what I was hoping for. But then the wiki should be clarified that its not just your passphrase that you need to backup, but your wallet file as well.

I have put a note about it on the page: http://wiki.bitshares.org/index.php/BitShares_X_How-To
Title: Re: Is the password effectively a brain-wallet ?
Post by: voldemort628 on July 20, 2014, 11:19:02 pm
So how do i create multiple wallets?
I.e for bitcon i can have multiple wallet.dat files, what about in btsx?
Do i just keep the "wallets" folder like i keep the wallet.dat?