1

In mist you create an account and you provide password. Now your keystore files have been accessed by unauthorized people but not your password which is in your head and only there. Can your ethers be stolen using only those files?

1

"Unlocking" you wallet if someone can have access to your wallet file depends of your password strength. If you really want to store all your assets in this wallet, please, keep your wallet files and password safe on an encrypted offline computer or use a hardware wallet like Ledger nano s or Trezor. Trust no one.

  • Thanks. The point is password is safe. The keystore is also in safe place. But I am sure my password is safe, has been safe, and will be safe. Keystore files could have been copied by someone at certain time in past. Is this a problem? – Gamma1980 Jul 3 '17 at 20:37
  • 1
    If your password is safe but easy enough to be brute forced, your ether is at risk. Anyway if you have any doubt, simply create another wallet (simple address or multi-sig contract) and move all you funds, the old compromised account will still be at risk but with a zero balance so you can abandon it. – Nicolas Massart Jul 3 '17 at 20:41
  • I understand. My problem is you have to be online even for one second to create a functioning wallet and address. I guess occasionally creating new wallet and move the funds would be a good idea as an extra security. – Gamma1980 Jul 3 '17 at 20:54
  • 1
    No, you can prepare you transaction offline( myetherwallet.groovehq.com/knowledge_base/topics/…), using an offline version of MyEtherWallet (download it on the github page github.com/MyEtherWallet/MyEtherWallet) and then transfer it using an usb key to your online computer to include it in the live chain. – Nicolas Massart Jul 3 '17 at 21:00
  • 1
    I think you really don't understand what an Ethereum address is, no offense, but just please read something like that myetherwallet.groovehq.com/knowledge_base/topics/… – Nicolas Massart Jul 4 '17 at 1:04
0

Even if your passport is safe, it can be guessed by simply trying all the possible passwords. For your password to be secure, it has not only to be long, but to be somehow random. qwerty or password can be guessed easily. If you use real words, you have to use several of them, chosen randomly. To learn more, you can search "entropy in information theory".

It is always easier to attack your password than your secret key, so you should really pay attention to get it secure.

Any password an be guessed, but the cost becomes exponentially higher with entropy (i.e. "randomness + length").

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.