3

There is an ICO that asks for ethereum keystore file, which is unusual for me as far as ICOs go. Even though it does not looks like it contains private key and password it still feels unsettling. Is it not private, can it be shared safely?

  • Out of curiosity, could you share which ICO is it? – pabloruiz55 Oct 20 '17 at 0:11
  • During polkadot.network auction they ask to either Load an Ethereum JSON Keystore File or Generate a new Ethereum wallet – Michael Babich Oct 20 '17 at 9:58
  • (Disclaimer: This in no way should be considered legal advice. Moreover, nothing written here should be construed as investment advice either) I recently participated in the ICO. Yes, it's true they ask for the JSON keystore file, but they also allow you to generate a new wallet with them. I wouldn't fear it is a scam in the sense they will run with the money by emptying your wallet, but I wouldn't give them my JSON Keystore File. You could create a wallet with them and just use it for this particular ICO if you are interested in investing. – pabloruiz55 Oct 20 '17 at 15:13
7

You should definitely not give away your keystore file as it contains your encrypted private key. The only thing that can decrypt your private key is your password. However, one could perform a brute force algorithm on your keystore file in an attempt to crack your password and gain access to all your funds.

If you create a new wallet on myetherwallet.com it explicitly states that you should not share your keystore file.

  • Or create a new wallet with low cash flow. – Michael Babich Oct 20 '17 at 10:06
  • But let's say your password is somenting like xD09@ˆ@ˆ@dd012##0123[s--D]dks__! and the and someone try to performe a brute force on the keystore. According with grc.com/haystack.htm it can take centuries to crack the password, does it make sense ? – Eduardo Pereira Oct 24 '17 at 20:58
  • @EduardoPereira I think they are just opportunistically trying to steal your wallet. If your wallet has such long and random password, the chances are that they will never get your money but still not a good idea to pass keystore files around. – wbkang Oct 25 '17 at 1:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.