Guide to Create Hot and Cold Wallets

[Twarden]

Create a hot-wallet:

From a computer you trust with an internet connection, go to https://jatchili.github.io/minimalist-ripple-client/ and click generate identity, you will be notified to save your secret key before exiting the window.  

Click on show/hide secret and then back up your secret on two separate pieces of paper an save them both in safe places (i.e. one in your wallet and one in another location besides your home like a safety deposit box).  

Save your ripple address on your computer via copying and pasting it into a text file, a bookmark, draft email, or whatever else you prefer.  Fund the wallet with 25 XRP to activate the account, once this is done, you can begin to build trust-lines to Gateways.

Create a cold-wallet:

From a computer that you trust with an internet connection you trust, go to  https://raw.githubusercontent.com/jatchili/minimalist-ripple-client/master/index.html and download the latest release of the minimalist client as index.html on a clean USB drive. Eject the removable media and connect it to a standalone PC.

Open the index.html file with Chrome or Firefox and click the generate identity button, you will be notified to save your secret key before exiting the window. 

Click on show/hide secret and then back up your secret on two separate pieces of paper an save them both in safe places (i.e. one in your wallet and one in another location besides your home like a safety deposit box).  

Save your ripple address on your computer via copying and pasting it into a text file, a bookmark, draft email, or whatever else you prefer.  From another computer with internet access, fund the wallet with at least 25 XRP to activate it, once this is done, your cold wallet has been created.  Keep your two copies of your secret key safe, it is the only way to access this cold wallet's funds when you will want to spend them in the future.

To regain access to your cold wallet:

From you computer that you trust with an internet connection you trust, go to https://jatchili.github.io/minimalist-ripple-client/ and enter your secret then press set identity.  

When you click set identity, your public key will be displayed.

Click connect to ripple and you will receive a response within another window.  You can now query the balance of your cold wallet, trade, and send funds.

[stuffie]

> From you computer that you trust with an internet connection you trust, go to https://jatchili.github.io/minimalist-ripple-client/ and enter your secret then press set identity.  

Is it wise to enter your secret key on 'some website someone made'?

I think not (no offense, i dont know you). I think you should do some investigation to reliability before entering your secret key.

[RafOlP]

4 minutes ago, stuffie said:

> From you computer that you trust with an internet connection you trust, go to https://jatchili.github.io/minimalist-ripple-client/ and enter your secret then press set identity.  

Is it wise to enter your secret key on 'some website someone made'?

I think not (no offense, i dont know you). I think you should do some investigation to reliability before entering your secret key.

You can check the code, its opensource. And you can download the html file and run it from your machine.

[Twarden]

4 hours ago, stuffie said:

> From you computer that you trust with an internet connection you trust, go to https://jatchili.github.io/minimalist-ripple-client/ and enter your secret then press set identity.  

Is it wise to enter your secret key on 'some website someone made'?

I think not (no offense, i dont know you). I think you should do some investigation to reliability before entering your secret key.

The minimalist client uses ripple-lib which is based on java-script and operates directly in a browser.  Anyone can audit the full code which accesses all function before usage.  The portions of the software which create new identities calls the generateAddress() method from ripple-lib without passing any arguments in his code which returns a new secret and public key-pair which is set to their respective fields within the web page.

 The portion of his code that deals with setting the secret is all handled within the browser an does not require access to the ripple network for the set identity function to work.  The function jatchili created, pressSetIdentity(), will assign the secret key entered to a secret variable, checks if there is already an identity set an if true notifies the user if that condition is true, otherwise the script checks if the secret variable has been set an if that condition is true then the script checks the encoding of the user's inputted secret by checking for the correct character at the beginning of the secret for each possible encoding the secret could be in. 

The functions setOrdinarySecret, setRekeyedSecret, and setEncryptedSecret receive the secret variable to more user-defined functions which validate the user's secret to return a true or false return; For this portion of the script to set your identity, both the characters at the first position (0) and the validation from the secret validation functions must be true to hit a pass comment, which tells java-script to essentially do nothing and proceed to continue to wait for another event to occur.  The last two else clauses at the end of this block ensure that the user either sets a valid secret (entered it wrong) or forgot to input their secret before pressing set identity.

[stuffie]

OK, if you download source code, check it and run it on your own computer, then i see no problem. 

Nice code btw..

Edited February 20, 2016 by stuffie

[Twarden]

In addition to jatchili's client, you an now download this package I wrote to generate a key-pair offline.  Simply download the package to a USB storage device you trust from a device you trust, extract the HTML file and the RippleAPI, an open up the HTML file to be presented with a new key-pair.

[jn_r]

2 hours ago, Twarden said:

In addition to jatchili's client, you an now download this package I wrote to generate a key-pair offline.  Simply download the package to a USB storage device you trust from a device you trust, extract the HTML file and the RippleAPI, an open up the HTML file to be presented with a new key-pair.

Nice example of using the ripple-lib. The html code should be easy enough for anyone to follow..

The really suspicious could rebuild their own ripple-0.16.5.js. Maybe Ripple should provide a pre-build version of the lib with md5 checksum..

Edited March 10, 2016 by jn_r

[Twarden]

50 minutes ago, jn_r said:

Nice example of using the ripple-lib. The html code should be easy enough for anyone to follow..

The really suspicious could rebuild their own ripple-0.16.5.js. Maybe Ripple should provide a pre-build version of the lib with md5 checksum..

I could provide the minimized version within the HTML for anyone to go over with a fine tooth comb if they so choose but the built library remains unedited for its version in a more readable separate file.  Anyone can check the contents were not altered by building their own version for comparison and/or as a replacement.

[jn_r]

Just now, Twarden said:

I could provide the minimized version within the HTML for anyone to go over with a fine tooth comb if they so choose but the built library remains unedited for its version in a more readable separate file.  Anyone can check the contents were not altered by building their own version for comparison and/or as a replacement.

Many people are not able to build the lib themselves. and what I read is that there are people who just don't trust anyone, except Ripple itself. A pre-build version of the ripple-lib with md5-checksum from Ripple the company would provide just that type of trust-worthiness.

 

n.b. I compared my built version (ripple-0.16.5.js) with yours... it does contains differences.. No idea why, both are ok afaik

[Twarden]

5 hours ago, jn_r said:

Many people are not able to build the lib themselves. and what I read is that there are people who just don't trust anyone, except Ripple itself. A pre-build version of the ripple-lib with md5-checksum from Ripple the company would provide just that type of trust-worthiness.

 

n.b. I compared my built version (ripple-0.16.5.js) with yours... it does contains differences.. No idea why, both are ok afaik

I agree that a checksum may provide some trust-worthiness but it may not be provided.  If you built your version of the library on different operating system than mine, there will be minor differences.