Home Foren Trezor Wallet Schützt Sie ein 13. oder 25. Wort, wenn es ein kurzes Wort ist?

  • Dieses Thema hat 8 Antworten und 1 Teilnehmer, und wurde zuletzt aktualisiert vor 1 Monat, 2 Wochen von loupiote2.
Ansicht von 8 Antwort-Themen
  • Autor
    Beiträge
    • #3545509
      root_s2yse8vt
      Administrator
      Up
      0
      Down
      ::

      Welche zusätzliche Sicherheit bietet ein kurzes 13. oder 25. Ist es sinnlos? Würden die Hacker es einfach sofort mit roher Gewalt knacken?

      Gibt es ein Szenario, in dem man erkennen könnte, dass die ursprüngliche Wallet kompromittiert wurde, und dann die Gelder mit der Passphrase aus der Wallet senden könnte, bevor die Hacker an sie herankommen können?

      Entschuldigung für die paranoiden Fragen, dieses Sub macht mir in letzter Zeit Angst.

    • #3545510
      simonmales
      Gast
      Up
      0
      Down
      ::

      What does a passphrase do?

      It protects your seed if it is discovered.

      If your seed is safe, then no issue 🙂

    • #3545512
      Vakua_Lupo
      Gast
      Up
      0
      Down
      ::

      A short Passphrase is better than no Passphrase. Even if it is short it may give you time to move your funds if your Seed Words are compromised.

    • #3545513
      702jondukes
      Gast
      Up
      0
      Down
      ::

      This sub is filled with a few very knowledgeable peeps, and many toxic people. 13th or 25th possesses the virtue of being created by you, not from Trezor. Hackers brute forcing is just not realistic unless you’re a HNW individual, that **also** physically loses your hardware wallet.

    • #3545514
      Elegant-Ad2911
      Gast
      Up
      0
      Down
      ::

      A hacker would have to know you had a passphrase to attempt to brute it. You could leave cryptocurrency in the passphraseless seed as bait, where you would know someone had your seed because it had been transferred out without your permission. No amount of words is going to protect you if you have your seed and passphrase together in plain sight though.

    • #3545515
      BlazingPalm
      Gast
      Up
      0
      Down
      ::

      My understanding (probably flawed) is that any pass phrase adds security.

      If someone somehow got your seed, they could run a brute force attack, but they would need reason to do so (ie- they beat it out of you that your plain wallet is not all you have). Otherwise, they’d just be fishing in a sea of trillions of possible pass phrases- not a good use of resources.

      Longer is better, special chars, numbers, etc. but just having any passphrase is a significant security buff. Why not make another secret wallet with a more secure phrase once you’re ready? You can have multiple. Heck, you could even have a small amount on regular wallet and slightly more in passphrase wallet so that muggers could be satisfied. Your true 95% stack actually resides in the 2nd passphrase wallet.

    • #3545516
      benjaminchodroff
      Gast
      Up
      0
      Down
      ::

      I personally love the passphrase because it allows you to sufficiently protect against an evil maid attack (someone finding your seed phrase) and it can help you generate infinite wallets using the same seed phrase. You can back the passphrase in another secure location. There is no way to brute force it – if you lose this word, it’s all gone for good. If you store the word with the seed phrase… then it really doesn’t add any protection.

    • #3545517
      brianddk
      Gast
      Up
      0
      Down
      ::

      If you have a Trezor-T or Trezor-3, there are better methods to secure your device than a passphrase. For Trezor-1 I prefer a long PIN over a passphrase.

      If you have a Trezor-1, passphrase and PIN can both be brute forced, but it’s a slow process. BIP39 and the ChaCha encryption are both designed to be slow to brute force.

      I generally avoid passphrase because they can be incredibly dangerous to users that don’t understand seed generation. Easy to mess up, difficult to detect errors.

      ^(https://www.reddit.com/r/TREZOR/comments/18kw6ez/the_case_against_passphrases/)

    • #3545518
      loupiote2
      Gast
      Up
      0
      Down
      ::

      If someone has your seed phrase, they coukd be able to bruteforce your passphrase if it is less than 8 characters, or if it is a dictionary word.

      A stronger passphrase protects you better. Eg at least 15 characters, or at least 3 words will be hard to bruteforce.

Ansicht von 8 Antwort-Themen
  • Du musst angemeldet sein, um auf dieses Thema antworten zu können.