pull down to refresh

Derive a hardened xprv1'. Encrypt it with a good passphrase. Now you never expose your seed, only a password that, if you fuck up, can be reset through a restore from seed and sweep into xprv2'. Minimum touching seed phrase. All this BIP-39 hacking is cringe af because you're literally interacting with a root key. BIP-32 (that you're using to derive the keys and addresses with) was made so that you don't need the root key all the time. So that you can have funds in account (a) and (b) and if (b) gets compromised you still have everything (a). Walking around with your root key is completely negating that.

Possibly something else is being discussed here but just to be clear, I'm referring to three independently generated seeds, not multiple accounts generated from one seed. And the seed plate backups themselves would live elsewhere as a cold "emergency" backup, while remaining imported into the two hardware wallets' secure enclaves and the Tails Electrum's persistent LUKs storage. As I say though, this may be a separate discussion – if so, pardon the intrusion!

I didn't quote what you wrote, so I wasn't referring to what you wrote, sorry if I made that impression.

What I was calling out was a growing narrative that continuously using the seed (i.e. it not being a cold emergency backup like you describe) to re-derive something that could have been encrypted with a password, is good, while in fact it is exposing something that should only be exposed in emergencies (like you say too.)

I have seen this whole "stateless device, just insert seed" narrative for years now, and we also see a lot of "directly roll seed". With that, more and more safety measures get pushed aside without speaking to what those are, which bothers me. Not criticism of people, but more of a trend that calls for simplicity without understanding what is lost by ignoring guardrails.

reply
I didn't quote what you wrote, so I wasn't referring to what you wrote, sorry if I made that impression.

What I was calling out was a growing narrative that continuously using the seed (i.e. it not being a cold emergency backup like you describe) to re-derive something that could have been encrypted with a password, is good, while in fact it is exposing something that should only be exposed in emergencies (like you say too.)

I have seen this whole "stateless device, just insert seed" narrative for years now, and we also see a lot of "directly roll seed". With that, more and more safety measures get pushed aside without speaking to what those are, which bothers me. Not criticism of people, but more of a trend that calls for simplicity without understanding what is lost by ignoring guardrails.

Perfect, that makes sense! And no worries at all – I'm brand new to Stacker News today so some conventions may be sailing past me; apologies for that. I completely agree, and it's also why I haven't jumped aboard the Seed Signer train thus far. Good to call these things out! For Tails, the persistent LUKS storage seems a very clever feature for this use case.

reply