A Trial Disaster Recovery Of My Android Crypto Wallets: A Dry Run Of What I'd Do If I Lost My Phone, Some Things I've Learned In The Process & A Recommendation To All Crypto Owners...

in #cryptocurrency7 years ago (edited)

For some time the insecurity of having all of my cryptos in my phone has nagged at me. It's convenient, sure, but the inevitable will one day happen.

  • The phone will die
  • The phone will get stolen
  • The data will become corrupt or the app will irrecoverably crash (this scenario was recently covered by SGT Report)

... so before we sit down to our Sunday night movie, I decided I'd try out the process of recovering my funds on another device.

Some context first. I run two wallets on my phone, blockchain.io and Jaxx. The former is the oldest and was basically one I chose on @dollarvigilante's recommendation. The Jaxx wallet I chose based on good reviews and was born of my desire to expand into multi coin wallets.

It seemed sensible then to search for the Jaxx windows application on my laptop. I wanted to go with an application because as far as I understand, that gives me the best chance that the private keys stay local to the device. Although without monitoring the network traffic (and even then it may be difficult) it's hard to determine that this is the case. Surely any web based wallet however necessarily requires the server side to access the private key to encrypt transactions meaning that the key leaves your local device, something I'd like to avoid.

I searched my laptop for the 12 word recovery passphrase that I'd written down when setting up the wallet. The installation was a breeze on windows and the setup was easy to follow. First came the policy confirmation

policy.png

... then came the choice of whether I wanted to create a new wallet or restore an existing one. Great! I selected the restore option.

wallet option.png

... and then came the excitement of entering my recovery phrase. Brilliant! A few moments of "initializing wallet" and there was my balance and my transaction list. Hero!

phrase.png

But wait a minute, when I visited the Ethereum tab on my restored Jaxx wallet, the balance was zero. My mood tempered. How can this be? Was it taking longer to initialise the Ethereum wallet than the Bitcoin wallet? I went back to my phone and sure enough, there was my Ethereum.

Horror of horrors. Then, I noticed that my windows wallet was showing a higher Bitcoin value than my phone. Had the recovery lumped my Ethereum into my Bitcoin balance and aggregated them? Surely not!

After some thought, I wondered whether what I was seeing was my other Blockchain.io balance. I logged into that wallet on my phone and sure enough, the balance and transaction history matched. So what I'd done was enter the wrong recovery phase meaning that my Jaxx windows wallet now shows the contents of my Blockchain.io android wallet. This makes sense if you think about it. The wallet is just software that implements the protocol. Your balance isn't vendor specific.

That lead to the obvious question of where on earth my Jaxx recovery phrase was. Naughty @nolnocluap! I couldn't find it recorded. Finding that deficiency was exactly why I wanted to run through the process. I went into my phone, exported my recovery phrase and recorded it, hopefully dodging a bullet in the process.

I think tried to do the same with Blockchain.io, thinking I'd restore my Jaxx balance there. I couldn't find an application download, only the web interface that I was able to log into and view my balance in. This concerned me due to the remote nature of the private key so I may decide to ditch that wallet in the future. I'd certainly be open to input on that issue!

Interestingly, I don't seem to be able to disassociate my recovery phrase with my windows wallet now so I can't easily repeat the process with the Jaxx phrase to match what's on my phone. Perhaps the installation folder caches this and blowing that away may run me through the initial steps again. I'll have to look at that another time. I'm also left with the situation that I'll likely want to adopt another local (non-web) wallet for my Blockchain.io balance.

For now at least, I'm happy that I've got a decent chance of getting at my cryptos should my phone access be unavailable for some reason. The big lesson, like anything related to preparedness, is to try it out before you need to. I highly recommend that crypto owners attempt something similar on different devices to ensure that the loss of your primary method of access doesn't result in a loss of your hard earned coins.

Thanks as always for your readership!

Sort:  

I had been thinking exactly the same for a while and decided to go for a trezor. There is something quite reasssuring about having your funds not on your phone although I still do have some. Will have to have a dry run myself!

I am using my Trezor for almost everything. The password manager functionality is awesome and all my cryptos (Zcash,BTC, Ethereum) are safe and offline. I really like the hardware and software quality.

I haven't actually used that yet. Is it good then?

Yeah you should definitely get one.

Top notch, will do!

Great idea @meesterboom. I feel much happier having tried it out. I'd not have caught the fact that my second pass phrase was missing otherwise. Interesting you've gone with a Trezor. I've pondered a hardware wallet for a while. Are you happy with it?

You really should get one (either Ledger Nano S or the Trezor). But if you can wait, the new Trezor 2 (with touchscreen) will be released quite soon. I will definitely buy a few.

Thanks @geronimo. I'm almost leaning towards the old (established) model than the new one which may yet be as refined in terms of bug fixes, updates and revisions. I'll look into it more deeply.

I am very happy with it. I can check the balance on it without having to have the device and it is very easy to use. Same twelve word recovery seed also.

It had given me reassurance whereas before I was getting to the stage where I was kakkng it that something/anything would go wrong with my software wallets!

are you also using the password manager ?

That feels very much like the situation I find myself in. The confidence level is quite important prior to committing any decent funds. Thanks for the input!

Good call, having some crypto on a phone wallet if you plan to use or move it daily isn't as big of a risk. And having the bulk protected by your trezor is a great option.

Exactly, I feel much better this way

Paper wallet is always the safest; if you put it in a Swiss bank locker 😊

Or just keep it somewhere safe. But you are right! Besides hardware wallets are paper wallets the safest way to keep your crypto safe.

Treat it like gold and silver stacking!

Don't quote me but I'm 90% sure jaxx stores your keys in plain text on your phone, and any mobile targeting malware can steal your funds if you are not careful. You have to consider if the convenience is worth the risk, ideally having crypto you don't plan to use in cold storage where it can be physically protected. Also if you have larger holdings in crypto splitting between a few wallets is not a bad option so if the worst happens, you don't lose it all.

Currently no one should keep their cryptocurrencies on their phone just because the device is always online. Hardware or paper wallet, this is it.

Great tip @valelr7. That does seem quite vulnerable for a highly connected device. What a great collection of pragmatic suggestions this post has produced! I'm keen to move some funds offline after digesting all of this.

The Blockchain is a great technology and for the time being we can expect that emergent nature of the community will overcome all the bans, governments and restrictions and to continuously change technology on its way.

Having said this it's very difficult to bet on the right crypto, which one will be the one that will solve the specific issue of the moment?

My suggestion would be to:

  • yes spend time to select cryptos and tokens, look at graphs and read about teams and regulation
  • but always maintain a portfolio of cryptos so that you are not too exposed to idiosyncratic risk

I wrote a small series on diversification benefits and the income that can be created through it.

CryptoPortfolio - Extract a "diversification dividend" - Part 1: Geometric and Arithmetic Returns
CryptoPortfolio - Extract a "diversification dividend" - Part 2: Portfolio Risk and Diversification
CryptoPortfolio - Extract a "diversification dividend" - Part 3: How to make 8% more per year

I would be grateful to anyone who wants to take a look and let me know what he/she thinks! Thanks

Thanks for the considered comment @belgarath. I'm a big supporter of the concept of diversification as it'sa powerful tool to combat the fact that we really can't know how good our investment decisions will ultimately be.

Absolutely, a little diversification is really free lunch!

Thanks @muhammadriky. Did it provide you with some value?

Congratulations! This post has been upvoted from the communal account, @minnowsupport, by nolnocluap from the Minnow Support Project. It's a witness project run by aggroed, ausbitbank, teamsteem, theprophet0, someguy123, neoxian, followbtcnews/crimsonclad, and netuoso. The goal is to help Steemit grow by supporting Minnows and creating a social network. Please find us in the Peace, Abundance, and Liberty Network (PALnet) Discord Channel. It's a completely public and open space to all members of the Steemit community who voluntarily choose to be there.

Congratulations👌👌👌This post 👌👌👌has been upvoted👍👍👍 from the communal account💐💐💐💐

I think all of us are jittery at the possibility of losing our phone and our wallet with it. Nice writeup. Definitely a secondary backup is compulsory.

Thanks @perennial. It's something that's been plaguing my thoughts for some time. It makes sense that others are similarly tormented. Some great community discussion here.

Informative! Good sharing

Coin Marketplace

STEEM 0.18
TRX 0.16
JST 0.029
BTC 77191.63
ETH 2961.40
USDT 1.00
SBD 2.63