Protect Your Tokens! How To Secure ERC20s With A Hardware Wallet + MyEtherWallet (Ledger Or Trezor)

in #ethereum7 years ago

MEW 1.jpg

This is all a lot simpler than it looks.

I regularly preach the need for hardware security for all of your cryptocurrency on my blog, but I rarely make more than a passing comment about how to do this for ERC20 tokens. The truth is, it's actually quite easy, and once you setup a hardware wallet Ethereum address, you won't need to even plug in your hardware wallet unless you are wanting to send tokens out. In other words, you can stash tokens (and Ethereum) for hodl'ing from exchanges in a hardware-secure manner by simply withdrawing to an address encrypted via your hardware wallet, while it sits in your safety deposit box.

I am only familiar with one interface that allows you to secure your ERC20s via hardware wallet: MyEtherWallet. Despite some hubbub recently about a potential disagreement between the founders and an unscheduled rebrand, MEW has always remained secure if your tokens are hardware-wallet secured. MEW is only an interface to an ethereum wallet - they do not hold any tokens.

MEW 2.png

Note the support for both Ledger and Trezor.

MyEtherWallet isn't exactly winning any interface awards. I have always found it confusing (particularly, the interface for sending Eth/tokens out from a wallet), and I have spoke with a number of other otherwise-intelligent crypto users who feel the same way. However, it is secure. As long as you are using a hardware wallet, the staff of MEW could go completely rogue and the worst thing they could pull off is some sort of phishing attack / transaction address swap, which we will address later.

Once you have setup an account, all you need to do to access your hardware wallet is choose the option for your brand. With a Ledger, it's very simple. You install the Ethereum app on your Ledger with the Ledger Manager (if necessary). Then, you simply connect your Ledger, unlock it, and load the Ethereum app. Having a connected and unlocked Ledger essentially serves as your password - you will be able to simply tick "Ledger" and login to a hardware secured wallet.

MEW 3.png

The interface you will be greeted with upon login (more or less.)

All the key functions of MEW are visible here. At the left, you have your address - both in "0x" form and in QR scan-code form. In the top right, you have network status and your gas price settings. These determine how much of a fee you pay for sending tokens on the Ethereum network, and are a bit confusing and clunky. You can ignore these until you need to send tokens out from MEW.

At the bottom right you've got the meat of what most of us are here for - the token interface. Here you can see all the ERC20 tokens you have sent to this address. As you can see, I have rather pathetically small amounts of both Civic (I'll cover this another time) and EOS.

MEW 4.png

You can even add a custom token, if you so choose. It works, I've done it.

If you wish, you can always view your address without logging in via your hardware wallet. You cannot perform any functions, but you can check balances.

You can do the same at the following address, just add your Ethereum address before "#tokentxns"

https://etherscan.io/address/#tokentxns

If you religiously use hardware wallets, you can only lose your tokens if your are attacked via a transaction address swap. That's when a piece of malware intercepts the address you are attempting to use to send, capturing it between your PC and your hardware wallet, and changing it such that it sends to the attackers address instead of the one you intended. If you religiously check the transaction address on your hardware wallet (every character!) to confirm it matches your intended sending address, you will foil all of these type of attacks.

Be safe with your crypto hoard!

Try SteemFollower today and get rewarded for every vote!
See my explanation of SteemFollower here.

Try SteemEngine and get rewarded for every follow or vote!

PAL Logo.gif

Join us at the Minnow Support Project! (click me)
We also have a Radio Station! (click me)
...and a 10,000+ active user Discord Chat Server! (click me)

Almost 80% of Steemians do not vote for witnesses, who secure the Steem blockchain! If you wish to make me your witness voting proxy, I will attempt to vote in Steem's best interest based on the information in my witness reports. You may set me as your proxy by clicking here and scrolling to the bottom of the Witness Voting page. Proxies are instantly revokable at any time, and witness voting does not use your voting power.

Proxy.png

Join the Steemit Poker League! (@spl)
World's Largest Cyptocurrency Freeroll Poker Site, open only to Steemians!

Sources: Google.com, Pinterest, MyEtherWallet, Etherscan.io, Discord
Copyright: Swoopify.com, Pinterest, MyEtherWallet

Sort:  

I can vouch for the Ledger Nano to hold your ERC20 tokens.

Agree
()

Thanks for this article. I have just received my Ledger but I was so tired I haven't tried it yet. I will read this again tonight and try it out.

i think securing crypto accounts is biggest challenge for us
because of his long wallet keys that is not be saved on mind easily
and second on the hackers who stole accounts.

I hope no one relies upon their mind to remember the keys to their wallets. What happens if you die and the key was in your mind? You need to make sure that not only you can access your funds but in case something happens to you, your family will get to see that stash of bitcoins you were hiding in your stocking :)

Very good point...and they'll likely need copious instructions too, not simply private key access.

thats why i asking some small codes like 8 characters is easily on mind @lucygarrod i said this because if someone stole our laptop or our laptop hard is crashed or our flash drive is get lost then only our mind can recover this.

Brute forcing is getting easier with quantum computing. 8 characters is not enough security for anything vital with irreversible transactions anymore.

Thank you for the hardware wallet info. I'm not able to purchase one at the moment, but speaking of MEW they refer users to get Meta Mask and I do have that. What do you think of Meta Mask? Thank you

To be honest, I haven't used it. I've heard it's a better software-security option than some others. May be worth using for small amounts until you can get a hardware wallet.

Thanks for the reminder again to get a damn ledger.. yeah i know lazy people, bad shipping blablablaexcuses

You made a good guide for newbies like me dude. Mew interface is horror, its time to get that better

They could certainly use an update, but at least it works.

You got a 14.71% upvote from @allaz courtesy of @lexiconical!

You got a 25.73% upvote from @nado.bot courtesy of @lexiconical!

Send at least 0.1 SBD to participate in bid and get upvote of 0%-100% with full voting power.

Nicely stated! I personally believe all crypto investors should have a hardware wallet. Trusting these exchanges with your hard earned crypto simply makes no sense! Which hardware is your true favorite? I have both the Ledger and Trezor hardware wallets. I prefer the Trezor as it seems to be more functional. I have resteemed this post to share with others.

Do they not support keepkey I didnt see it on the last for screenshot ?

Coin Marketplace

STEEM 0.19
TRX 0.15
JST 0.029
BTC 63968.82
ETH 2633.99
USDT 1.00
SBD 2.84