Die Seed-Erweiterung (bekannt als “Passphrase”, “Passwort”, “25. Wort”) wird auf der Tastatur des Computers eingegeben?

[root_s2yse8vt]

Up

0

Down

::

Ich habe die Dokumentation gelesen und es [looks like](https://trezor.io/content/wysiwyg/Images_sorted/PUBLIC_ALL_Security_and_Privacy/Security_best_practices/Passphrase/PP-2.png) ist die Art und Weise, wie die Seed-Erweiterung gehandhabt wird, nicht sicher, da sie anfällig für Key-Logger, Screen-Grabber usw. ist.

Können Sie bestätigen, dass die Eingabe der Seed-Erweiterung über die Tastatur des Computers erfolgt?

Haben neuere Versionen dieses Problem gelöst und welche?

Der Sinn einer Hardware-Geldbörse besteht darin, zu verhindern, dass Malware, die auf einem normalen Computer läuft, die privaten Schlüssel (und die Geheimnisse, die zur Ableitung der privaten Schlüssel verwendet werden – den Seed, die Seed-Erweiterung und den Pin-Code) abfängt.

[kaacaSL]

Up

0

Down

::

Hi, with Trezor Model One yes, this is the only option. However, the passphrase alone is not enough for getting to your coins. The attackers would still need access to your recovery seed, and since Trezor Model One allows you to use the Advanced recovery, there is no way for any keylogger to get to your seed.

Our flagship model Trezor Model T allows you to enter passphrase on the display though.

[Pi77Bull]

Up

0

Down

::

You can click the link at the bottom that says “Enter passphrase on Trezor”.

In any case though, even if someone has access to that passphrase, they are still missing the 12/24 word seed phrase.

[SilverTruth7809]

Up

0

Down

::

Well here we go again, a malware cant intercept or extract your privatekeys. Its safe because you would still need 24 out of 2048²⁴.

If you dont like this buy a trezor t.

[[deleted]]

Up

0

Down

::

[deleted]

[IIIBryGuyIII]

Up

0

Down

::

How often are your email, bank account, Netflix account, etc. getting their passwords stolen out from under you? Those usernames are generally just a email address that’s not private and easily guessed.

A wallet is like a username with 24 random words that has a 25th word (pass phrase) as the password …this is an analogy of course.

I could start brute forcing your email address simply by knowing your email address because you sent me an email.

Simple digital security practices eliminates most risk and 2FA is still nothing compared to the entropy of 24 word seed phrases.

TLDR; common digital use cases are exponentially more vulnerable to key loggers but completely avoidable too. Hardware wallets are monumentally more secure even when exposed to similar threats.

[No_Boysenberry_6331]

Up

0

Down

::

You can certainly type it on Trezor for extra security.

[Autor]

Beiträge