nano ledger is safe ?

[Gwada97159]

Hey folks,

 

could you please explain me why nano ledger is safe, if yes, is there a tutorial how to use it ?

 

Best.

[Bagheera]

3 minutes ago, Gwada97159 said:

Hey folks,

 

could you please explain me why nano ledger is safe, if yes, is there a tutorial how to use it ?

 

Best.

Check out https://ledger.zendesk.com/hc/en-us

Lots of very helpful documentation and support.

I have a Leger Nano S and I think it is very safe.

[SCHUMIXRP]

i would be of  no help because i dont have one but people say its good

Edited November 5, 2018 by SCHUMIXRP

[RegalChicken]

Does anyone worry about the idea of the nano having been tampered with? 

 

 

[cuber]

13 minutes ago, RegalChicken said:

Does anyone worry about the idea of the nano having been tampered with? 

 

 

I posted this in another thread a few days ago

https://ledger.zendesk.com/hc/en-us/articles/115005321449-How-to-verify-the-security-integrity-of-my-Nano-S-

https://ledger.zendesk.com/hc/en-us/categories/115000813065-USER-GUIDE

Thread here https://www.xrpchat.com/topic/11870-xrp-from-toastwallet-ledger-nano-s/?tab=comments#comment-121311

 

[vanhalendlrband]

I am very technical with computers.

How does the Nano differ from say a paper wallet?

Is there any possible way that the owners of the Nano software could have access to the private keys? Thats my main concern.

[tomkri]

2 hours ago, Gwada97159 said:

Hey folks,

 

could you please explain me why nano ledger is safe, if yes, is there a tutorial how to use it ?

 

Best.

When people talk about wallets in the context of crypto currencies they are really talking about software that handles secret keys and the use of those keys to sign transactions. A transaction must be signed using your secret key for it to be valid. There aren't really any coins, they are just existing implicitly given all the transactions registered. So "wallet" is a somewhat  imprecise metaphor.

With a hardware wallet:

1. Your secret keys are created inside the hardware wallet.

2. The secret key never leaves this wallet, not even is you use it on a infected computer. 

To make a transaction:

1. Software on your computer creates a unsigned transaction.

2. The unsigned transaction is sent to the hardware wallet, where it is signed using the secret key. And here you can see the destination address on the display, and you have to physically press keys to approve before the transaction is signed.

3. The signed transaction is sent back to the computer, which sends it to the network.

So the advantage is that your keys never are on your computer, were they are vulnerable to spyware, viruses etc.

Lets say you install a fake wallet, or a wallet that has a bug someone has exploited, that reroutes your transaction to somewhere unintended. Doesn't matter, because the unsigned transaction contains the destination address and you can see it on you nano ledger display, if it isn't the correct one you just don't press the keys that approve its signing.

And of course no rogue wallet can steal your keys, as they are not on your computer.

[RippleSider]

nano ledger can't be safer than a paperwallet i think  

[RegalChicken]

2 hours ago, tomkri said:

When people talk about wallets in the context of crypto currencies they are really talking about software that handles secret keys and the use of those keys to sign transactions. A transaction must be signed using your secret key for it to be valid. There aren't really any coins, they are just existing implicitly given all the transactions registered. So "wallet" is a somewhat  imprecise metaphor.

With a hardware wallet:

1. Your secret keys are created inside the hardware wallet.

2. The secret key never leaves this wallet, not even is you use it on a infected computer. 

To make a transaction:

1. Software on your computer creates a unsigned transaction.

2. The unsigned transaction is sent to the hardware wallet, where it is signed using the secret key. And here you can see the destination address on the display, and you have to physically press keys to approve before the transaction is signed.

3. The signed transaction is sent back to the computer, which sends it to the network.

So the advantage is that your keys never are on your computer, were they are vulnerable to spyware, viruses etc.

Lets say you install a fake wallet, or a wallet that has a bug someone has exploited, that reroutes your transaction to somewhere unintended. Doesn't matter, because the unsigned transaction contains the destination address and you can see it on you nano ledger display, if it isn't the correct one you just don't press the keys that approve its signing.

And of course no rogue wallet can steal your keys, as they are not on your computer.

So what you're saying essentially for those who aren't as tech savvy, is that we are not at risk of Ledger the company being able to access the tokens we deposit in our Nanos, and our hardware wallets are indeed 100% safe? 

[zenkert]

14 minutes ago, RegalChicken said:

So what you're saying essentially for those who aren't as tech savvy, is that we are not at risk of Ledger the company being able to access the tokens we deposit in our Nanos, and our hardware wallets are indeed 100% safe? 

The Devils advocate @RegalChicken sir Likealot.

[tomkri]

22 minutes ago, RegalChicken said:

So what you're saying essentially for those who aren't as tech savvy, is that we are not at risk of Ledger the company being able to access the tokens we deposit in our Nanos, and our hardware wallets are indeed 100% safe? 

Unfortunately not. You have to put your trust somewhere in any case.

https://en.bitcoin.it/wiki/Hardware_wallet#Security_risks

 

If you for example create a paper wallet you must trust the software that generates the secret key. Also, with a paper wallet eventually you will have to enter the secret key into your computer. 

Can I trust my laptop? Not 100%. Neither the hardware or the software I have installed. I don't think it is possible to eliminate all risk.

So if the guys at Nano Ledger has a long term evil plan of stealing secret keys I suppose they can do so. But I consider this risk to be tiny compared to the risk of my laptop being compromised through spyware and viruses. 

 

Another thing to keep in mind is that the destination address you see on your actual computer screen could be manipulated. Then a hardware wallet wouldn't help either of course, as this address is the one you would compare with on hardware wallet's display. Maybe someone made your browser show a fake address when sending coins to Bitrex...

Edited November 23, 2017 by tomkri

[RegalChicken]

2 hours ago, tomkri said:

 

That's more or less what I thought. I feel like the only truly safe method in the wild west of crypto is multiple wallets / exchanges. So at least them if you do get compromised you don't lose everything in one fell swoop. 

[RippleSider]

That is the reason why one takes a newly formatted notebook or so for it

[tomkri]

4 minutes ago, RegalChicken said:

That's more or less what I thought. I feel like the only truly safe method in the wild west of crypto is multiple wallets / exchanges. So at least them if you do get compromised you don't lose everything in one fell swoop.

It is the all eggs in one basket problem. I know the feeling. I myself do keep all on Nano Ledger, but I don't have life-changing amounts. If I did maybe I would keep some in paper wallet, some on Ledger, some on Trezor (also hardware wallet), some on reputable exchange in a jurisdiction  I trust like USA or EU, but unlike Coconut-Island. But anyway, overall I do feel hardware wallets are safest. 

[zenkert]

Just a quick note here *

* Why on earth does anyone think that Common People would invest in Cryptos when things like this is discussed???

Edited November 23, 2017 by zenkert