1/19 Importing a BIP85 derived key from @COLDCARDwallet to @SamouraiWallet and then connecting to @RoninDojoUI

A thread on minimizing trust by generating keys offline, compiling an Android app, and using your own node.
2/19 BIP85 enabled wallets can create private keys for many wallets. This way, users only need to secure 1 backup. From there all other wallets can be restored by their index #. See this thread 👇 for setting up a @COLDCARDwallet from scratch & BIP85 uses.
3/19 Securing your master seed phrase in a durable medium like metal is advisable. @bitcoinbackup is awesome and there are many other resourceful solutions.
4/19 Once @COLDCARDwallet is set up, navigate to Advanced>Derive Entropy. If a BIP39 passphrase is present a warning will be displayed. This means that in order to restore the BIP85 derived wallets, the 24 word seed & the user's secret "25th word" are required for restoration.
5/19 Next select the private key format, @COLDCARDwallet can generate 12-word, 18-word, 24-word, WIF, xprv BIP32, 32-byte hex or 64-byte hex. @SamouraiWallet supports importing BIP39 & BIP44 keys. A 12-word key is being used here. Make note of the index # used!
6/19 Next the @SamouraiWallet Android application needs to be installed. In this example it will be compiled from source by navigating to their repository:

code.samourai.io/wallet/samoura…
7/19 Ensure the 'samourai-wallet-android' directory is selected, check the version #, and download the zip file or clone via other methods.
8/19 Open Android Studio or install if necessary. All the default settings will work for this example. Select open an existing project and navigate to the folder unzipped from the download.

developer.android.com/studio
9/19 Navigate to Tools>SDK Manager & ensure the SDK Tools tab is selected & the Show Package Details box is checked. Then select 29.0.3, hit Apply, hit Ok.
10/19 Then navigate to Build>Build Bundle(s)/APK (s)>Build APK(s). This process should only take a few minutes to run and should populate a successful build notification in the lower left side of the interface window when finished.
11/19 Where ever the zip file was unpacked is where the APK file will be saved. Navigate to that folder and then:

samourai-wallet-android-develop\app\build\outputs\apk\production\debug

Plug the Android device into the PC. Drag & drop this APK to it. Ensure file transfer on.
12/19 Navigate to the Android device's Files folder and select the appropriate APK. Some warning prompts may come up.
13/19 Once the APK has been installed ensure Tor is activated, selected the 3-dot menu in the upper right-hand corner, & Connect to Dojo. Then scan the QR code on the @RoninDojoUI
14/19 If you are interested in building your own Dojo, I put together some information about the @SamouraiWallet + @RoninDojoUI stack in this thread 👇
15/19 Once the Dojo is connected, select the 3-dot menu again and choose Import Existing Wallet, then enter the 12-word phrase generated by @COLDCARDwallet. Optionally, a BIP39 phrase can also be added to this wallet. The BIP39 passphrase is separate from BIP85 key.
16/19 Now the @SamouraiWallet can be connected to Whirlpool GUI where UTXOs enjoy high entropy mixes that never reuse addresses and always break deterministic links, all backed by your own full node Dojo @RoninDojoUI. If the Android is lost then @COLDCARDwallet has the backup.
17/19 Plus each @SamouraiWallet gets a BIP47 PayNym and has several privacy enhancing post-mix spending tools like Stowaway, Stonewallx2, & Ricochet.
19/19 Some other thought provoking content on verifying entropy:
medium.com/@bjdweck/two-h…

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with burn the bridge

burn the bridge Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @econoalchemist

8 Oct
Succinct recapitulation of the recent DOJ publication from @OxoUtx. Between this, FATF travel rule, SLiC, & J-CODE there have been several noteworthy privacy related headlines recently.
FATF Travel Rule & Bitcoin "industry leaders"
Read 5 tweets
17 Sep
1/56 @SamouraiWallet + @RoninDojoUI

A thread on privacy, anonymity, & options.
-Samourai Mobile Wallet
-Ronin CLI
-Dojo full node
-Ronin UI
-Whirlpool GUI
-Electrum
-Explorer
-OXT
-KYCP
2/56 @SamouraiWallet & @RoninDojoUI are 2 different developer teams. Dojo is meant to be used as your own full node in support of your SW for better privacy & trust mitigation. Ronin is the UI used to interact with your dojo.

samouraiwallet.com

ronindojo.io
3/56 @SamouraiWallet is a #BTC only, mobile wallet for Android. Like any other HD wallet, your xpub is used to display balances & generate addresses. As with any HD wallet, if you’re not running your own node then you’re introducing trust by using someone else’s.
Read 56 tweets
21 Jul
1/17 Having spent the last few days in the front row of a @SamouraiWallet vs. @wasabiwallet debate, it seems like the strongest argument against SW is "they have the users' xpubs & may be compelled to hand them over to law enforcement".

This struck me as a half-baked argument.
2/17 I'm not an attorney, however, I do have experience handling digital evidence in support of litigation. It's been years since I was in that line of work but by all means if you're an attorney and/or Bitcoiner & are so inclined, correct me if I'm wrong...
3/17 First of all let's clear something up. SW needs your xpub in order to display your wallet balance. Your xpub is sensitive in terms of your tx history, balances, & spend tx's. So it makes sense that this may be information that is sought after by law enforcement. However...
Read 17 tweets
18 Jul
1/18 Probably not the best explanation but here's an attempt to highlight what's at stake with Coinbase ("CB") from my point of view.

Call me crazy or paranoid but a company with your personal data & your public data will not resist the temptation to combine them.
2/18 The info transmitted on the #Bitcoin network is public. Meaning anyone in the world can watch the network & see all the addresses/transactions made. This public info is kept in a decentralized database that dates back to the first transaction and catalogs all transactions.
3/18 The public availability of this data isn't concerning to you because your true identity is masked by a pseudonymous address. Even though evidence of every transaction is captured in the database, nobody knows it's you unless you tell them or you leak sensitive information.
Read 18 tweets
3 Jul
1/10 Where do seed backups go when they die?

A thread on various seed destruction methods on the heavy duty, 2mm, 304 stainless steel @bitcoinbackup from @Coinkite
2/10 You drained all your #BTC from an old wallet. Is it safe to just throw the old backup in the trash?

If you had KYC Bitcoin in that wallet then some of those addresses are tied to your name.

How would you feel if someone signed a message from an address tied to your name?
3/10 Properly destroying your seeds is important for preserving privacy even after the wallet is no longer used.

Here is multiple caliber test footage of four @bitcoinbackup plates from @Coinkite starting with .22 caliber.
Read 10 tweets
28 Jun
1/19 A thread on BIP85, setting up a @COLDCARDwallet from scratch, & using a primary seed to derive entropy for @bluewalletio & Bitcoin Core.

"One seed to rule them all, One Key to find them, One Path to bring them all, And in cryptography bind them."
2/18 The cool thing about BIP85 is that it enables one to create several keys for several #Bitcoin wallets from a single, primary seed. i.e., you just have 1 seed to protect & all your #Bitcoin wallets are safe. Perfect for people who like trying several wallets.
3/19 @COLDCARDwallet has implemented BIP85 in their latest firmware release. Because they're awesome. And they have the coolest gear. So get one for yourself, open the tamper-evident packaging, plug it into your @usbCOLDPOWER and follow along.
Read 19 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!