Skip to content

Commit 787c9ea

Browse files
authored
Merge pull request #76 from mmikeww/patch-5
add instructions for verifying addresses on offline machine
2 parents c4ece88 + 061f814 commit 787c9ea

File tree

2 files changed

+28
-4
lines changed

2 files changed

+28
-4
lines changed

_pages/verify-receive-address/advanced.md

Lines changed: 26 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -38,11 +38,33 @@ We can improve this by using an offline/dedicated machine, where we install only
3838
While this will help protect you against malware on your computer, you are still at risk from an [Evil maid attack](https://en.wikipedia.org/wiki/Evil_maid_attack) with physical access to your computer (or paper printout).
3939
Such an "evil maid" could tamper with this software/printout to instead show bitcoin addresses that they control, and trick you into receiving a deposit on their address.
4040

41-
#### Option A: Dedicated Machine
42-
TODO: add instructions for inputting extended public keys & paths (no private keys/seeds) running Electrum, Sparrow, Caravan, or some CLI script.
41+
#### Option A: Offline/Dedicated Machine
42+
You will set up the multisig in the software wallet of your choice by importing the extended public keys for all N seeds from your quorum.
4343

44-
It is recommended to use an eternally quarantined machine, meaning that it is never again connected to the internet and not used for any other purpose.
45-
That way, the attack surface is reduced and you are not at risk of malware on an ongoing basis.
44+
It is recommended to use an eternally quarantined machine, meaning that it is never again connected to the internet and not used for any other purpose. That way, the attack surface is reduced and you are not at risk of malware on an ongoing basis.
45+
46+
Alternatively, you can use Tails, which you might already have used when [setting up your Paper Wallet](https://btcguide.github.io/setup-wallets/paper-advanced).
47+
48+
1. [Verify](https://btcguide.github.io/setup-wallets/coordinate-multisig-advanced) that all the Zpub/xpub keys match on both the Cobo and the Coldcard
49+
50+
##### Electrum
51+
52+
2. In Specter, click on your `Wallet Name -> Settings -> Export -> Export to Wallet software -> Download Electrum (watch-only) File`
53+
3. Save this file to USB stick or SD card. Something that you can access from Tails.
54+
4. Reboot and run Tails
55+
5. Open Electrum, on the first window, click "Choose" and find the wallet file that you exported above in step 2
56+
6. The wallet should open. Go to the Addresses tab to verify the addresses match the addresses shown on the hardware wallets. If you cannot see the Addresses tab, use the menu item for View -> Show Addresses
57+
58+
59+
##### Caravan
60+
61+
2. Reboot and run Tails
62+
3. Turn on WiFi inside Tails, and visit: https://unchained-capital.github.io/caravan/
63+
4. Turn off WiFi
64+
5. Click "WALLET"
65+
6. On the right side of the page, set 2 of 3 quorum, and set P2WSH address type
66+
6. On the left side of the page, select the dropdown to "Enter as text", and type in all 3 of your Zpub keys [shown](https://btcguide.github.io/setup-wallets/coordinate-multisig-advanced) on either your Cobo or Coldcard
67+
7. Allow Caravan some time to generate the wallet, and then use the Addresses tab to verify the addresses match the addresses shown on the hardware wallets
4668

4769
#### Option B: Print the Addresses to Paper
4870
One benefit of this is that you could get by without a dedicated machine, and the other is that paper is easier for most people to secure vs a computer.

_pages/verify-receive-address/cobo.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,5 +8,7 @@ The large screen and true airgap improve both security and useability.
88
On Cobo Vault, click `Multisig Wallet` > `Receiving` tab (default selected) and click on the address:
99
![](/assets/img/verify-receive-address-cobo.jpeg){:width="35%" class="border_image"}
1010

11+
To see more addresses, return to the `Receiving` tab, and press the big `+` button to add more addresses
12+
1113

1214
{% include next_steps.md next_url="coldcard" next_name="Verify Receive Address on Coldcard" %}

0 commit comments

Comments
 (0)