The open-source desktop wallet now allows users to CoinJoin directly to cold storage after a configurable number of mixing rounds.
Sparrow Wallet, an open-source Bitcoin wallet focused on self-sovereignty and usability, has added support for the Whirlpool CoinJoin implementation in its newest release. Sparrow 1.5.0 allows users to mix unspent transaction outputs (UTXOs) via the new integration, both on the mainnet and testnet Bitcoin networks.
Whirlpool is a Chaumian CoinJoin implementation built by the developers of Samourai Wallet. Like other implementations, it allows Bitcoin users to enjoy forward-looking privacy by breaking assumptions blockchain observers may have about their coins and ownership.
At its core, a CoinJoin is a Bitcoin transaction, albeit a special one, in which different people trustlessly combine their inputs into the same transaction, later receiving their dutiful outputs. It seeks to break transaction heuristics that chain analysis companies use to cluster addresses together in the hopes of breaking the pseudonymity provided by Bitcoin.
By implementing Whirlpool, Sparrow increases the reach of that CoinJoin implementation into more users hence helping increase liquidity in the protocol and, at large, improve the fungibility of all bitcoin. Fungibility is a central aspect of money that prevents two coins, or UTXOs in Bitcoin, from being distinguished from each other or preferred over one another.
Sparrow’s new release also allows users to send their CoinJoin outputs to an external, open wallet after a configurable number of mixing rounds, for example, a cold storage wallet, and an option to optimize transactions for privacy (with Stonewall) or efficiency. Additionally, the desktop wallet now provides a simple privacy analysis of a constructed transaction before sending and a better UX for its Tor integration.
As a censorship-resistant technology, ensuring the fungibility of coins and the privacy of users of the Bitcoin network is paramount to prevent coercion and secure individual liberties. Whereas totalitarian governments have for centuries been able to enforce arbitrary rules due to their control over people’s money, Bitcoin provides people with the power to fight for human rights causes and protect personal freedom.
This article demonstrates using a stainless-steel backup plate for securing bitcoin against fire, flood and other disaster. This backup will work for securing any BIP39 word-phrase and it is specially-tailored for use with Samourai Wallet.
Self custody of your bitcoin is serious business, it is a radical responsibility. You and you alone are responsible for the security of your bitcoin.
The majority of wallets used for securing bitcoin will provide the user with a 12- or 24-word seed phrase. This goes for mobile wallets, desktop wallets and hardware wallets. But storing the wallet information in digital media such as a text document or image file is risky, because anyone with access to that digital file will be able to withdraw the bitcoin from that wallet.
Writing down these words in order on a piece of paper is a great way to ensure that the information necessary to restore the wallet is secure in a way that is never accessible by internet connection. But how secure is paper, really? What happens if there is a fire where this paper is located? What about a flood? Preventing loss of bitcoin by securing the seed words in a steel medium is a great way to protect against such incidents.
A passphrase can also be used to add additional wallet security. Passphrases are kind of like having a 13th or 25th seed phrase word, but only you know what the passphrase is. The passphrase can be any combination of letters, numbers or special characters. And remember: No one can help you recover your passphrase, so be sure to take care and secure it accordingly. If you lose your passphrase and need to recovery your wallet, the 12-words alone will not be enough.
Introducing The RoningSteel Backup Plate
The RoninSteel backup plate, designed by the RoninDojo team, is a steel plate for storing your Bitcoin seed phrase and protecting it against disaster. While its tailored for Samourai Wallet users, it will work with any BIP39 seed phrase.
Upon receiving the RoninSteel backup, you will find:
An envelope with tamper-evident seals
A stainless-steel plate measuring 6 and 1/4″ x 3 and 1/4″ x 5/64″
A 12-word seed phrase template sticker for use with Samourai Wallet
A passphrase template sticker
4
If you’re using Samourai Wallet, then the 12-word seed phrase will be punched on one side of the plate and the passphrase will be punched on the other side of the plate.
Alternatively, there are other sticker templates available for 24-word seed phrases. The idea with these is that you would use both sides of the steel plate for the words and a second plate for the passphrase, if applicable. You will notice that there are places to indicate the word number and whether or not a passphrase is used.
How To Generate And Secure A Bitcoin Seed Phrase With Samourai Wallet
I’ll demonstrate how to generate a new seed phrase and passphrase using Samourai Wallet and then how to secure them.
The basic steps to create a new wallet are:
Step through the introduction
Allow file access
Enable Tor
Connect a Dojo if you have one
Create a passphrase
Create a PIN
Generate a 12-word phrase
Claim a PayNym
Once the wallet is set up, the 12-word seed phrase and passphrase can be transferred to the steel backup. First, gather the steel plate, the 12-word seed phrase sticker, a sharpie, a spring-loaded punch and also the 12 words by navigating to the three-dot menu in the upper right-hand corner of the Samourai Wallet application, then “Settings,” “Wallet,” “Show mnemonic.”
Carefully place the sticker on the steel plate so that all of the edges are aligned. Then, use the sharpie to mark the corresponding circles on the sticker. The A-Z alphabet runs horizontally and the 12-word columns run vertically. You only need the first four letters of each word, as all words on the BIP39 list have a unique sequence of the first four letters.
4
Double check your work before using the spring-loaded punch. Make sure to also indicate if you are using a passphrase in the lower right-hand corner. Then peel the sticker off.
Once the sticker is removed, the information is obfuscated and just looks like some random dots. If someone were to gain access to this steel plate, they would not be able to determine the information contained here without a recovery sticker.
Next, you can stamp your passphrase on the reverse side of the plate. Double check that your passphrase is correct by navigating to the three-dot menu in the upper right-hand corner of the Samourai Wallet application, then “Settings,” “Troubleshoot,” “Passphrase/backup test.”
Then, carefully place the passphrase sticker on the steel plate so that all of the edges are aligned. Again, use the sharpie first and then double check you work before using the spring-loaded punch. You will notice that there are rows on the top and bottom edges indicating which column the character for a particular row belongs.
4
Then, peel the sticker off and the information is obfuscated.
2
Now, all of the necessary information to restore your wallet is secured in a durable, stainless-steel medium and it is obfuscated. You can use the included red envelope and seal it with the included tamper-evident sticker. Then, store this securely as if it were gold or jewelry.
3
Let’s see how well this stainless steel plate withstands white-hot temperatures near melting point, 1,500°C:
The plate survived the fire test, but let’s see if the information is recoverable:
The information was 100% recoverable! Even after the fire test, by applying a recovery sticker, the 12-word seed phrase and the passphrase were both recovered. The recovery stickers are clear in the little circles so it is easier to see the divots. Using the tip of the spring-loaded punch, I was able to locate the divots and impress the sticker to make it more visible.
12-Word Phrase:
2
Passphrase:
2
Wallet Recovery Check:
In conclusion, the RoninSteel backup plate is durable enough to withstand white-hot temperatures and still secure your wallet recovery information. The plate is small enough to be easily concealed anywhere in your home.
One plate can be used for a Samourai Wallet 12-word phrase and passphrase or multiple plates can be purchased for 24-word seed phrase/passphrase combinations. The tamper evident seal on the envelope adds some peace of mind in knowing if anyone has accessed the steel plate.
By removing the stickers, the information is obfuscated in a way that makes it useless to anyone who doesn’t know exactly what it is and doesn’t have the stickers to use. All in all, I thought this was a cool way to secure Bitcoin wallet recovery information.
To learn more about Ronin Dojo check out these resources:
This is a guest post by Econoalchemist. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc or Bitcoin Magazine.
One of the original allures of cryptocurrency is the narrative that using them provides the sender or recipient anonymously, but this is a common misconception within the sector.
In reality, Bitcoin (BTC) and many other cryptocurrencies are easily traceable.
Proof of this came earlier this week when on April 27, U.S. authorities arrested the mastermind of Bitcoin Fog, a darknet-based BTC mixing service. Authorities were able to capture the operator after analyzing ten years of blockchain data.
One doesn’t need to be a forensic analyst to know that every single transaction is tied up to addresses on the blockchain and that they will stay there forever. While government agencies cannot determine the IP address or personal data from the address, these coins usually end up being used for products or service payments. This is the trail that leads back to the sender and recipient.
In the case of Bitcoin Fog, law enforcement was able to identify server hosting expenses paid using digital currency. Bitcoin mixing services such as Bitcoin Fog allow users to mix their coins with other users, making it almost impossible to detect the destination addresses. This obfuscates the ties between the inputs and output addresses, providing a better level of privacy.
Example of a mixing transaction. Source: TarushTech-Medium
Mixing services are offered in a wide range of methods, including fully centralized solutions where trust is required, to Coinjoin mixers, which depend on a large group of users to self cooperate and act simultaneously. There’s even the possibility of trading on decentralized exchanges (DEX) to virtually eliminate any possible tracing.
Mixers do present a few risks
Centralized mixers offer the obvious single point of failure problem. Even if one trusts that the entity is using multisig addresses, if the service is willing to share its data or has been breached, their users will lose their privacy.
CoinJoin solved this problem by combining the inputs of multiple users into a single transaction. The service will then take those coins, craft them into a transaction, and have each participant sign before broadcasting it to the network. These transactions are then merged into one, and each user gets the original quantity in return. However, no one can see the origin of those coins, not even the entity that merges the transaction.
Even though CoinJoin isn’t exactly untraceable, it provides plausible deniability, as no one can point out which entity owns each output. The larger the number of participants, the higher the degree of deniability.
Wasabi Wallet CoinJoin function screen capture. Source: WasabiWallet
Some cryptocurrency users also require anonymity for sending tokens to their wallets, and Wasabi Wallet has long been used for its embedded CoinJoin functionalities.
While its infrastructure is technically centralized, its design assures that the operators cannot deanonymize users or steal any funds. At the moment, the Wasabi wallet is only available for desktop solutions, so as is the case with anything in cryptocurrency, beware of clones!
A similar service is provided by Samourai wallet, which also offers a Chaumian CoinJoin mixing service, called Whirlpool. To achieve a full-privacy solution, users have to connect the Samourai wallet to their own full Bitcoin node. However, it does offer desktop and mobile versions.
Even though these mixing services aren’t illegal in most jurisdictions, some exchanges and services might refuse users linked to addresses associated with coin mixing activities.
As more people realize the importance of achieving a certain degree of privacy for self-protection, the fewer incentives companies will have to deny their clients to use mixers.
The views and opinions expressed here are solely those of the author and do not necessarily reflect the views of Cointelegraph.com. Every investment and trading move involves risk, you should conduct your own research when making a decision.
This article explains a privacy-enhancing transaction tool called Stonewallx2. Developed by Samourai Wallet, this tool can be used to collaborate in cahoots transactions to create decoy bitcoin outputs.
When it comes to defensively guarding the privacy of Bitcoin users, Samourai Wallet has been on the bleeding edge for many years. Maintaining privacy while using Bitcoin requires paying close attention to the way that your transactions are being built; which inputs are being used and what kind of history your inputs are bringing with them. Common input ownership heuristics are used by chain analysis companies to surveil Bitcoin users. These heuristics make the assumption that when there are multiple inputs to a Bitcoin transaction, those inputs belong to the same entity. Techniques can be used to break these assumptions, thus rendering the ability of a chain analysis company to maintain such assumptions utterly indefensible.
One technique used in the fight for privacy is a tool brought to you by Samourai Wallet is called StonewallX2. When someone wants to enhance their privacy while sending bitcoin, they can choose to collaborate with another user to build a cahoots transaction, which will take multiple inputs from both parties and always produce four outputs. Two of the outputs will be identical in size, one is the actual spend to the third party and the other one is a decoy which is sent back to the collaborator. Then the other two outputs are the change returned to the two collaborating parties.
For example, if Bob wants to send Charlie 0.007 bitcoin, Bob can collaborate with Alice to build the transaction in a privacy-enhancing way. The transaction will have four outputs:
Change to Alice
Change to Bob
Spend to Charlie
Identical decoy spend returned to Alice
It is necessary for Alice and Bob to communicate the timing of their transaction out of band, meaning that in the example video below, Bob will have contacted Alice using a communication method outside of the Samourai Wallet application such as a phone call, an E2EE text, a secure email, etc.
To an external observer of Alice, Bob and Charlie’s transaction, they will no longer be able to make any certain conclusions about the ownership of inputs and outputs to the transaction. When the external observer looks at Alice & Bob’s transaction on chain, this is what they will see:
How To Use Stonewallx2
Any Samourai Wallet user can start using StonewallX2 and other privacy enhancing tools right now. Here is a video example of a StonewallX2 transaction being built between Alice and Bob with a payment being sent to Charlie:
Step One: Set Up The Transaction
StonewallX2 transactions can be built between two collaborators with the payment going to a third party.
Bob selects his Whirlpool wallet from the homescreen so that he can spend bitcoin from his mixed outputs.
In this example, Bob wants to send a payment of 0.007 BTC to Charlie. Bob is going to collaborate with Alice by having her provide some inputs to the transaction as well. Alice will pay half of the miner fee and receive the benefit of added privacy in return.
Bob has copied Charlie’s receiving address to his clipboard and he pastes it in the “To” address dialog box.
Then, Bob enters the amount to spend, 0.007 BTC.
Next, Bob enables the Cahoots privacy add on, then selects StonewallX2, then selects “online participant.”
At this point, Bob’s PayNym contact list is retrieved and Bob is able to select Alice’s PayNym from his list. In order for PayNym contacts to populate on your list, you will need to have followed each other. It is not necessary to take the added step of connecting to each other.
Once Alice’s PayNym has been selected, Bob will have a chance to review the transaction details and set the miner fee. Bob is ready to begin the StonewallX2 transaction.
Step Two: Out-Of-Band Communication
It is necessary for Bob to coordinate the timing of the transaction with Alice out-of-band using a preferred communication method such as E2EE text, secure email, phone call, etc.
Once Bob has coordinated with Alice, then Alice knows to start listening for the Cahoots request by selecting “Receive” from her wallet homescreen, navigating to the three-dot menu in the upper-righthand corner and then selecting “Receive Online Cahoots.”
Alice could also receive the Cahoots request from her Whirlpool post-mix wallet which will offer all parties optimal privacy benefits.
Alice receives the notification and approves the request.
Step Three: Soroban
Soroban is an application-agnostic communication layer that shares the transaction details between both wallets encrypted over Tor. This development enhances the user experience and achieves a complete transaction, ready to broadcast, within seconds regardless of geographic distance.
Both Alice and Bob will observe a progress bar at the top of their wallet screens.
Bob’s wallet is providing inputs and Alice’s wallet is also providing inputs.
StonewallX2 transactions can have many inputs but will always have four outputs. The 0.007 BTC payment to Charlie is one output, with an identical 0.007 BTC output going back to Alice. The other two outputs consist of “change” being returned to Alice and Bob.
Step Four: Finalize And Broadcast
Once the transaction has been built, Bob has an opportunity to review the details and then he can send the transaction. He will be asked to confirm and then with that, the transaction is broadcast to the Bitcoin network.
A Stonewallx2 Q&A
One of the things I like most about Samourai Wallet is that it builds the tools it wants to see in the world, tools that the team itself uses day in and day out. I think this approach is summarized well on its website with the statement: “We are privacy activists who have dedicated our lives to creating the software that Silicon Valley will never build, the regulators will never allow, and the VC’s will never invest in. We build the software that Bitcoin deserves.”
I recently had the chance to ask a member of the Samourai Wallet team a few questions about on-chain privacy:
Why should Bitcoiners care about on-chain privacy and what do they have to lose by not using the tools?
The blockchain is an immutable, publicly-available ledger. The tracks you leave behind today will be available for the public (the good, the bad and the ugly) to scrutinize forever more. By taking steps to improve your on-chain footprint now, you are helping not only your present situation, but more importantly your future situation.
How does Stonewallx2 help enhance a user’s privacy?
Stonewallx2 has a few benefits. First, it supplements the normal Stonewall transactions because both transactions have the exact same on-chain footprint. This means that every one person using Stonewall can be two people using Stonewallx2 from the perspective of an external observer of the blockchain. Second, the composition of a Stonewall transaction is designed as such to create a transaction with as many interpretations as possible. Most transactions have a single interpretation, making tracking the flow of funds trivial. When a Stonewall transaction is encountered, the number of interpretations is increased significantly, in addition to doubt as to the number of participants in the transaction (one or two?).
What do you think is the most important privacy development in Bitcoin that developers could be working on today to mitigate future on-chain privacy concerns?
The lowest-hanging fruit is eradicating address reuse. A great way of helping this along are PayNym- (BIP47) derived stealth addresses. These special addresses are reusable and allow you to share them publicly without any privacy loss, unlike sharing a static bitcoin address. After that, I would suggest implementing an advanced coin selection algorithm such as Stonewall.
What advice would you give to someone new to Bitcoin? What do you wish you had known when you were first starting out with Bitcoin?
Stay away from KYC services. They will try to lure you in with convenience at the cost of your sovereignty and freedom — stay away. Take it slow, don’t rush anything. Use the tools.
Conclusion
Samourai Wallet has developed many privacy-focused tools, bringing new features and improvements to users that help achieve anonymity through their CoinJoin implementation, Whirlpool, and maintain privacy with spending tools like Stowaway, Stonewallx2, Richochet and PayNyms.
Samourai Wallet is also the only Bitcoin wallet to date that has implemented BIP47. Additionally, it recently implemented the app-agnostic, Tor-based communication layer Soroban. Soroban brings tremendous UX improvements to users engaging in collaborative cahoots transactions like Stowaway and Stonewallx2. See usecahoots.com for an article I wrote on Cahoots transactions and the UX evolution of building the transactions manually versus automatically over Soroban.
Sonewallx2 is a powerful privacy-enhancing tool that can be used to break common input ownership heuristics while spending to a third party. To learn more, visit Samourai Wallet’s website here. You can start taking steps today to increase your privacy and minimize your on-chain footprint. Supplementing your Samourai Wallet with your own Bitcoin full node is a logical next step if you’re not running your own node then you are trusting someone else’s. The Ronin Dojo team has built the perfect full node companion for your Samourai Wallet. Learn more at the Ronin Dojo website here.
Both developer teams maintain resourceful community support channels on Telegram:
Samourai Wallet: https://t.me/SamouraiWallet
Ronin Dojo: https://t.me/RoninDojoUI
This is a guest post by Econoalchemist. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc or Bitcoin Magazine.
This article is designed to explain the importance of self-custody and the dangers of know your customer (KYC) regulations; to demonstrate to Bitcoin beginners how to install, secure and use a Bitcoin wallet; and to explain how to acquire KYC-free bitcoin.
You can find the articles in this series published individually as well:
Bitcoin Wallets For Beginners, Part One: Self Custody And Avoiding KYC
Source
Generally speaking, new Bitcoin users discover the importance of self-custody and the dangers of KYC after they have already started acquiring bitcoin. Since bad habits are hard to break, I wanted to cover this topic for Bitcoin beginners first. This tutorial has been designed for a total Bitcoin beginner, someone who is interested in Bitcoin but has no idea where to begin or what a Bitcoin wallet is or what to do with them.
With this ongoing five-part series, I hope to have put together an informative guide to some pitfalls to watch out for for new users with a focus on the installation and use of their first Bitcoin wallet and how to obtain non-KYC bitcoin. This way. anybody can bookmark this tutorial and reference it when they have the time and interest.
This first part is my attempt to help Bitcoin beginners understand my opinions around the importance of self-custody and the dangers of KYC. I wanted to take the time to share these thoughts in long form because I believe that if a person can understand what is at stake, then they will take this stuff more seriously, forming better habits from the beginning. I’m making the guides I wish I had when I was first getting started with Bitcoin.
FIVE REASONS FOR SELF CUSTODY
When you install a Bitcoin wallet on your mobile device or desktop, you are taking the radical responsibility of self custody. This means that you and you alone are responsible for your bitcoin. Some of this may be alarming, but it’s the honest truth; if you lock yourself out of your wallet, then that is 100 percent your fault and you are responsible for that loss. If you fall victim to a phishing attack and share compromising information with a scammer, that is 100 percent your problem and your loss. There is no customer support hotline in Bitcoin. There is no charge-back feature in Bitcoin. And there is no card-lock security in Bitcoin. Unlike using a bank, you and you alone are responsible for your bitcoin once you cross the threshold into self custody.
As the saying goes: “A ship in harbor is safe, but that’s not what ships were built for.”
You may be asking yourself why I’m such an advocate for self custody after reading that last paragraph.The answer is simple: freedom. With non-KYC bitcoin in self custody, financial permission, confiscation and censorship have no effect on the way that you economically interact with the world. That may come across as hyperbole or a load of buzzwords but let me give you five very real-world examples that may resonate with your life experience.
1. Maybe you have worked your whole life but you have never been able to set aside a meaningful savings account. Maybe you live paycheck to paycheck and you spend 110 percent or more of your wages every pay period.
This is because fiat currency like the USD is a terrible store of value. Your purchasing power is continually being siphoned out from underneath you through various forms of inflation, which is effectively confiscation. Every dollar printed is stealing the value of the dollars you accepted in exchange for your time and effort in labor.
Bitcoin helps ensure that the value stored today will be preserved for the future, and when you self custody your bitcoin, you can verify that your wealth is cryptographically in your possession at all times without trusting a third party. Check the Consumer Price Index to see how the cost of a basket of average consumer goods and services has increased over the years.
The majority of us have only ever seen our money lose purchasing power. If your wages haven’t increased by about 160 percent since 1983, then you’re falling behind.
2. Maybe you have had your wages garnished — that’s a much more direct form of confiscation. Maybe your state government decided that you owed it even more money in taxes than you already paid. Your state government has the authority to siphon money out of your paycheck before you receive it.
You thought living paycheck to paycheck was tough before? Try opening your paycheck one day to find that 15 percent has been confiscated after your federal income tax and state income tax and medicare and social security and mandatory health insurance have been taken.
Every Bitcoin transaction must meet the consensus rules, and if a transaction is not signed by the owner, then it will not be accepted. When you self custody, no third party can arbitrarily confiscate what is yours. When centralized authorities are removed from the equation, value can be transferred from peer to peer, uninhibited.
3. You’ve probably been working for a while. Every paycheck you get has medicare and social security taxes taken out that you will likely never benefit from. But the worst part is that every paycheck has a federal income tax taken out as well.
Federal income taxes are used to pay the interest on the money that the Federal Reserve prints for the United States Treasury. That’s right, you have to pay interest out of your pocket for a monetary policy that you have zero voting rights for. In fact, the people operating this monetary policy are not even elected officials, you have absolutely no voice.
The more money they print, the more purchasing power is confiscated from you, and there is more money circulating for you to pay the interest on. Bitcoin has a 21 million coin hard cap, this means that using bitcoin as a bearer monetary instrument ensures no representative and un-backed IOU is being printed and loaned out for circulating economic activity, thus eliminating the need for an interest-based monetary debt instrument, such as the U.S. dollar.
4. Have you ever had a transaction blocked by your bank because it doesn’t support the type of business you are attempting to interact with? That’s what permission looks like; your money, their rules.
Maybe the business was totally legal but it’s just in a taboo industry, like pornography. Maybe it’s legal in your state but illegal at the federal level, like a marijuana business. Maybe, in a not-so-distant future, your political contributions will be blocked unless they align with your bank’s vision of the world.
When your money is in someone else’s possession, you have to get their permission to use it. With bitcoin in self custody, so long as your transaction follows the consensus rules, i.e., you’re not trying to double spend, then nothing will stop it. No one’s opinion of your business is relevant, Bitcoin is software and will execute as expected for any person for any reason, every single time.
5. Have you ever been blocked from opening an account at a bank or had your account closed? That’s a form of censorship.
In 2019, when I moved my family to Wyoming in an attempt to leverage its “crypto friendly” legislation to start a Bitcoin ATM business, we found out the hard way what financial censorship looked like. We were rejected by 12 banks in Wyoming, plus one bank in California, two banks in New York and two banks in Colorado — 17 banks in total. Two of them had even opened accounts with us and then promptly shut us down and refunded our deposits once they found out our business was Bitcoin-related.
Bitcoin ensures that anyone is free to economically interact with the rest of the world. Because of Bitcoin’s decentralized nature, there is no central authority to deny your transaction or shut you out of the network. So long as your transaction meets the consensus rules, it will be valid and upheld by the network.
These are just a few examples of what it means to take self custody of money that is permissionless, cannot be confiscated and is censorship resistant. Third parties and all of the associated risks can be eliminated by using Bitcoin. There are many more examples and I think that if you reflect on your own life experiences, you will find incidents in which you fell victim to these kinds of problems.
THE RISKS OF TRUSTING BITCOIN EXCHANGES
Let’s say you get all that, you understand why bitcoin is better money — with the hard cap, the permissionlessness and the censorship resistance. But you still think that having your bitcoin in the possession of your exchange or broker is better than self-custody. After all, the exchanges deal with huge volumes of bitcoin everyday, so surely they can be trusted with your bitcoin. But therein lies the problem: trust. Let’s discuss what you’re sacrificing with that trust and see if you still think the same way about self custody afterwards.
Maybe you have heard of Mt. Gox, Quadriga or EXMO? These are a few exchanges that had catastrophic impacts on the people who trusted them.
When an exchange gets hacked, there are no fixes for the end users who have their bitcoin stolen. There is no FDIC or SIPC insurance. Furthermore, there is often no way for the public to verify that an exchange actually has the bitcoin it purports to have. An exchange could potentially sell 100 bitcoin IOUs when it only has 10 actual bitcoin, or it may have zero real bitcoin for that matter. There’s no way for the public to know.
Ask yourself what happens when you’ve handed your life savings over to Coinbase, for example, and suddenly there is a bitcoin liquidity crisis, and it turns out it sold more in bitcoin IOUs than it actually held in real bitcoin. Do you really think you’ll be safe? Do you really think you’ll get your money back? If you had your bitcoin in self custody, it would be safe and you could verify its existence for yourself.
Ask yourself what happens when the U.S. Securities and Exchange Commission decides that bitcoin trading needs to be halted, like it arbitrarily decided for 15 publicly-traded stocks. Do you think Coinbase or other regulated exchanges will keep your best interests in mind?
I want to take a moment to explain another issue that goes hand-in-hand when you trust a custodian with your bitcoin, instead of holding your bitcoin in self custody, and that issue is KYC.
THE DANGERS OF KYC
KYC requirements is an invasive scare tactic used to preemptively collect the data and personally-identifiable information about you that would prove, beyond a reasonable doubt, your ownership of bitcoin. Stemming from the Bank Secrecy Act, KYC regulations are enforced by the Financial Crimes Enforcement Network (FinCEN), a division of the U.S. Treasury.
These regulations were originally the federal government’s attempt to prevent U.S. citizens from funding foreign enemies. However, these regulations have morphed into an excuse for corporations, government contractors and state agents to harvest, track and share your personal information, opening the means by which governments can enforce controls on you. The range of KYC requirements can vary from providing your full name, birth date, email and phone number to your social security number, physical address, IP address, financial background statements, photographs of you holding your government ID, or all of the above.
Since bitcoin exchanges, brokers and most on ramps are conducting what the federal government considers “regulated activity,” these businesses are required by federal law to comply with these regulations. By not complying, a business runs the risk of being fined or shut down, which means that your best interests will always take a back-seat when dealing with regulated entities.
In recent years, it seems as though the federal government has irrationally raised the KYC requirements when it comes to bitcoin. For example, the Travel Rule would require money services businesses to automatically file suspicious activity reports to the federal government for bitcoin transactions exceeding $250 in value that cross a U.S. border, among other things.
The Travel Rule was fueled in part by the Financial Action Task Force (FATF), which is basically a group of assholes that take the broken anti-money laundering (AML) policies of the United States and try to force them into Bitcoin by writing recommendations like this.
This is the basis for my conjectures that forcing broken legacy system regulations into the Bitcoin ecosystem is abhorrently disastrous. The old financial system has failed miserably, the vast majority of people I know have seen their wages stay stagnant for years, they cannot afford to buy a home in the neighborhoods they grew up in, the money they do have is worth less every year, and 75 percent of all USD in existence has been printed after the launch of Bitcoin in 2009. Bitcoin is not the government’s money, they don’t get to make the rules.
Clearly, the rules governing the legacy system have failed, so I find it disturbing that people want to force these same rules into Bitcoin. The rules don’t even work in a system where the orchestrators have all of the control, why in the world would anyone think those kinds of rules are going to make Bitcoin better? I say cut the ties, burn the bridge that connects the old world to the new. Central banking is a rotten corpse and I’m sick of its stench.
The regulations are supposed to inhibit money laundering, however, the world’s largest banks are the ones facilitating the vast majority of money laundering and when they get caught, the penalties are less than the profits they made, which is incentive to do it again. If you haven’t read the articles from the International Consortium of Investigative Journalists, collectively known as the FinCEN Files, I highly recommend familiarizing yourself with them. Their key findings were:
Global banks moved more than $2 trillion between 1999 and 2017 in payments that they believed were suspicious, The figures include $514 billion at JPMorgan Chase and $1.3 trillion at Deutsche Bank.
Five global banks moved illicit cash for shadowy characters and criminal networks even after U.S. authorities fined these financial institutions for earlier failures.
Banks didn’t have information about one or more entities behind the transactions.
Years after concerns first emerged, banks continued to move money for fraudsters, drug dealers and allegedly corrupt officials, leading to cases of real harm.
There is also a cool map of the major transactions that were flagged in suspicious activity reports provided by ICIJ.
KYC/AML regulations cost businesses billions of dollars, these costs are passed on to the consumers. Ronald Pol of amlAssurance wrote a thought-provoking article about the costs and effectiveness of KYC/AML policies. He wrote:
“…anti-money laundering policy intervention has less than 0.1 percent impact on criminal finances, compliance costs exceed recovered criminal funds more than a hundred times over, and banks, taxpayers and ordinary citizens are penalized more than criminal enterprises.”
Can you see what kind of potential problem is mounting here? There are millions of hard working people who have struggled their entire lives, having their purchasing power confiscated from them through inflation, their money held hostage by the rules of bankers and their freedom of financial expression being censored. These people have discovered a solution to those problems with Bitcoin and they have volunteered their personal information to get it.
The requirement for that information is a cascading shadow of a failed financial system that prolongs the agonizing death of central banking. As country after country falls into a full blown currency crisis, the demand for bitcoin will increase. This means any information related to individuals who are in possession of bitcoin becomes more valuable. With the sovereignty of nations threatened and the masses left to fend for themselves, survival depends on adaptability and the ability to remain anonymous.
Thinking adversarially, as any responsible self-custody advocate should, imagine what happens when a Ledger-style data breach occurs on an exchange with more detailed personally-identifiable information and the individual’s Bitcoin addresses. I’m not even talking about the security of the bitcoin in the exchange’s possession, I’m talking about customers’ identifying information linked to their bitcoin holdings being breached.
Now, imagine a complete currency collapse of the U.S. dollar coupled with an inversely proportional rise in bitcoin demand. Meanwhile, your name, physical address, photograph and the amount of bitcoin you own is publically available. This may sound like I’m being an alarmist, but this will be an unfortunate reality that many people will have to face. People who are known to have bitcoin will be targeted and attempted kidnappings, ransoms or worse will occur. Start using the tools to protect yourself now.
It is already known that major exchanges actively partner with law enforcement agencies. Take, for example, the Coinbase/IRS/DEA announcement. These corporations are not your friends, they do not have your best interests in mind, they will protect themselves first and foremost and they will obey the government’s commands to make sure that they can stay in business and to make sure you are the product.
Consider another attack vector: If the government knows your identifying information and your bitcoin holdings, then you are more likely to become a target of theft through unrealized capital gains taxes, enforcement of a 6102-style executive order or full forfeiture of your assets as a matter of “national security.” When the sovereignty of a nation-state is threatened, nothing will stand in the way of isolating that threat. Even if it means imprisoning swaths of the population.
Keep in mind that the whole reason Bitcoin was created is because the ruling authorities completely messed up the money to begin with. Not by accident, but by systematically and methodically destroying the functions of money to purposefully enrich the few and create debt slaves out of the many. For generations, the majority of society has been harvested and used as fuel to keep the machine running. Now that Bitcoin has fixed the money, this thwarts the efforts of those in power to remain in power. They will not give up easily and they will try to drag you down with them.
Furthermore, KYC information polluting the Bitcoin ecosystem cripples the permissionless state of the network and opens the door for censorship opportunities.
Spend some time reflecting on these war games. Hope for the best, be prepared for the worst. Users can mitigate all of the issues listed above and more by taking the radical responsibility of self custody over their non-KYC bitcoin. The first step in doing that is to install a wallet on your Android, iPhone or desktop.
Bitcoin Wallets For Beginners, Part Two: How To Install Samourai
If you have an Android mobile phone, then I highly recommend using Samourai Wallet. This article will walk you through the basic steps for installing, securing and using Samourai Wallet on Android. Before getting started, it is a good idea to have a pen and paper ready. And Remember to start with small amounts of bitcoin until these concepts make more sense and you are comfortable putting your funds in a mobile wallet. And always backup your seed phrase!
Step One: Install Samourai Wallet
Samourai Wallet can be downloaded from its website or F-Droid, compiled from source code or installed directly on your Android device from Google Play Store.
For the simplistic and basic purposes of this guide, I’m only going to cover the installation instructions from Google Play Store. Be aware of malicious apps that may look similar, ensure that you are getting the Samourai Wallet app with over 100,000 downloads.
From your Android device, navigate to the Google Play Store app and then search for Samourai Wallet and install it, then open it.
Step Two: Allow Permissions
Allow camera permission for the app and operating system (OS). This allows for QR code scanning. Then, Allow read/write permission for the app and OS. This allows the encrypted backup file to be saved.
Step Three: Enable Tor
Make sure you enable Tor by moving the slider to the right. Wait for the confirmation, this allows app communication over Tor.
Note: If you have a Dojo, this is the step at which you would connect it. Keep in mind that, although running your own node is an advanced topic, it is highly recommended that you learn about it. If you do not use your own node, then you are trusting someone else’s node. There are many full node implementations available. This goes beyond the scope of this article but for some good resources, check here.
After enabling Tor, Select “START NEW WALLET.” Once installed, your Samourai Wallet will save an encrypted backup file to your Android device.
Step Four: Create A Passphrase And PIN
Next, you will be asked to create a passphrase. This is the passphrase that encrypts your backup file and your wallet’s BIP39 passphrase, also known as your “thirteenth word.” Any combination of numbers, letters and special characters is acceptable. I suggest trying to use a high-entropy password that cannot be guessed, such as one from a random password generator. Others may suggest using a passphrase that can be easily memorized. Weigh the tradeoffs for yourself and do what is best for you. Whatever you choose, remember that this passphrase will be necessary to recover your wallet in the event that your mobile phone is lost, damaged or replaced. Confirm acknowledgement that no one can help you recover this passphrase, then select “Next.”
Next, create a PIN code for accessing the app. If someone were to gain access to your Android phone, then this PIN code will protect your wallet. Any combination of numbers between five and eight digits will work. Try to use a PIN that cannot be guessed. Once entered, you will be asked to confirm the PIN code. Then select “Next.”
Step Five: Secure the Seed Phrase
Note: This is the most important step.
Write down your words in order on a piece of paper
Secure this piece of paper as if it were gold or jewelry
Do not screenshot these words.
Do not save these words on a computer or on your phone
Do not say these words out loud
Never share these words with anyone for any reason
Your bitcoin is only as secure as your 12-words and passphrase.
Double check your work, then confirm acknowledgement that you have secured your 12 words
Select “RETURN TO WALLET”
You will also need your passphrase from above for a complete secure backup
It’s a good idea to use the recovery worksheet provided by Samourai Wallet, it has all of the necessary fields specifically for your Samourai Wallet to fill in and help you keep your backup information organized. Find the downloadable PDF here.
Note: Once you get more serious about Bitcoin, consider securing your seed phrases on metal instead of on paper.
Step Six: Claim Your PayNym
Each Samourai Wallet user gets a unique “PayNym.” This can be used to collaborate with other Samourai Wallet users in cahoots transactions, to post public payment codes without revealing transaction history and more.
Select “CLAIM YOUR PAYNYM” at the bottom of the screen. Then select “YES” to claim your new PayNym.
Step Seven: Receive Bitcoin
There are different ways to receive bitcoin to your new wallet. From your wallet home screen, select the blue plus (+) sign and then select the green “Receive” piggy-bank button. This will bring up your first receiving address QR code. Or, to receive from another Samourai Wallet user, you can select the purple “PayNyms” icon instead, which will allow you to share the payment code in QR format or in text. Once you and another Samourai Wallet user follow one another’s PayNyms, then you can collaborate in cahoots transactions together.
The person sending you bitcoin can scan your wallet address QR code and spend from their wallet.
For example: Samourai Wallet users can collaborate in privacy-enhancing transactions like Stonewallx2. Using your bitcoin address QR code as the receiver, your sender can use their PayNym to collaborate with others to send you funds more privately. With the bitcoin address displayed above, the receiver has now been given 0.015 BTC from a privacy-enhancing Stonewallx2 transaction.
Once you have an unspent transaction output (UTXO) in your wallet like this, you can easily click on it and view more details. You can even open the transaction identification (TXID) on a block explorer and see even more details.
Below is how the transaction looks on-chain. Eight inputs, four outputs, in this example. Two of the outputs are identical, one is the actual spend and the other is a decoy. The common ownership heuristics have been broken. This is one way that privacy can be enhanced with these tools.
Step Eight: Spend Bitcoin
Find a collaborator and create a privacy-enhancing transaction with another Samourai Wallet user to send to any third party. First, select the blue “+” sign, then select the red “send” button, then enable cahoots.
Next, select “STONEWALLx2” and then select “Online” for the participant.
You and your collaborator should be following one another’s PayNyms, and then you can select your collaborator’s PayNym from your contact list. Then select the square-looking icon at the top to open your camera and scan the QR code from the person receiving your payment (a Blue Wallet user, in this example). Then, fill in the amount to send, 0.01 BTC in this example. Finally, select “REVIEW TRANSACTION.”
Next, you will be able to select your miner’s fee rate. Set it higher for more urgent payments accordingly. Once you begin the Stonewallx2 transaction, Samourai Wallet will exchange details of the transaction between the two collaborators’ wallets. This process is encrypted over Tor on the Soroban communication layer. You’ll get one last chance to review your transaction before broadcasting. The receiver should see a pending transaction arrive within moments.
You can also watch this demonstration video for installing Samourai Wallet on an Android for the first time here:
Conclusion
Samourai Wallet is a privacy-focused Bitcoin wallet that is most popular for its CoinJoin implementation, Whirlpool. Additionally, Samourai Wallet has post-mix cahoots spending tools like Stowaway and Stonewallx2. These collaborative transactions break common input ownership heuristics by obfuscating the true amount being sent and using decoy outputs.
Samourai Wallet was also the first Bitcoin wallet to implement BIP47, which enables users to share a payment code without exposing additional wallet details, enhancing privacy. Also, Samourai Wallet never reuses address and segregates toxic change and it has coin control and other advanced features. Your Samourai Wallet can also be connected to your own Bitcoin full node by using Ronin Dojo; another developer team that has built a powerful Bitcoin full node stack that is designed specifically for integrating with your Samourai mobile wallet and your desktop Whirlpool client. All communications in the Samourai Wallet/Ronin Dojo stack are routed over Tor by default.
To learn more about using Samourai Wallet, jump in its Telegram channel here.
You should now have a basic understanding of how to install Samourai Wallet on your Android, how to secure your wallet’s 12-word seed and passphrase and how to receive/send bitcoin in a privacy-enhancing way.
Bitcoin Wallets For Beginners, Part Three: Installing Blue Wallet
Source
If you have an iPhone and have bitcoin, then I highly recommend using Blue Wallet to secure your BTC. This article will walk you through the basic steps for installing, securing and using Blue Wallet on iPhone. But, before getting started, it is a good idea to have a pen and paper ready. Remember to start with small amounts of bitcoin until these concepts make more sense and you are comfortable putting your funds in a mobile wallet. And always backup your seed phrase!
Step One: Install Blue Wallet
Blue Wallet installs just like any other app on your iPhone. Navigate to your Apple App store app and select download. Check Blue Wallet’s website for more details.
If prompted, enter your Apple ID password. Once installed, launch the Blue Wallet application.
Step Two: Wallet Setup
Users can decide to use Blue Wallet with the standard settings or with advanced settings enabled. Advanced settings allow users to utilize more features, like adding entropy (randomness) to their seeds with dice rolls or coin flips, to set up wallets for different Bitcoin address types and more.
To enable advanced options, select the three-dot menu in the upper-righthand corner of the homescreen, then select “General.”
Then toggle the “Advanced Mode” slider and select the back arrow to return to the wallet homescreen.
From there, select “Add a wallet.”
You can name your wallet anything that is convenient for you, I chose “BW Demo” for this example.
Then you can choose the kind of wallet that you would like to create. I chose a Bitcoin wallet for this example.
If you decided to enable the advanced options, you will notice that you can choose the address type for your new Bitcoin wallet. I recommend sticking with the BIP84 Bech32 native SegWit address type. These are the addresses that start with “bc1” and typically, they can save you on data space in your transactions which translate to less expensive miner fees.
Then, if you would like to provide your own entropy in your wallet seed, you can select “Provide entropy via dice rolls” and then you will be able to select various sided dice or you can flip coins to generate random numbers to include in the generation of your seed. This is not required, but it is a nice option to have.
Alternatively, select the blue “Create” button when you are ready to move on.
Step Three: Secure The Seed Phrase
Note: This is the most important step.
Write down your words in order on a piece of paper
Secure this piece of paper as though it were gold or jewelry
Do not screen-shot these words
Do not save these words on a computer or on your phone
Do not say these words out loud
Never share these words with anyone for any reason
Your bitcoin is only as secure as your 12 words
Double check your work then confirm acknowledgement that you have secured your 12 words
Select “OK, I wrote this down”
Note: If you utilized the advanced option to provide your own entropy, then you should have 24 words to write down. Once you get more serious about Bitcoin, consider securing your seed phrases in metal instead of on paper.
Step Four: Receive Bitcoin
Now that your new Bitcoin wallet is set up and you have secured your 12-word seed phrase, you are ready to start receiving bitcoin.
From the homescreen, simply select the wallet icon for the wallet you just created.
This will bring you into the wallet where you can then select the “Receive” button at the bottom of the screen to display your first Bitcoin address QR code.
Before displaying your QR code, Blue Wallet will double check with you to be sure that you have written down your seed phrase. Then you will be asked if you would like to receive notifications of incoming payments.
Now you should see your first Bitcoin address QR code. You can physically display this QR code to someone and they can scan it with their wallet to send you bitcoin. Or you can copy/paste the address text and send your receiving address to someone that way. Be aware of the privacy implications when sharing your Bitcoin address; all transactions on the blockchain are available to the public, so it is a good idea to keep this information separate from your identity.
Once a payment transaction from your sender is broadcast to the network, you should see the pending receipt in your wallet within moments. Your transaction will remain in a “pending” state until it has a certain number of confirmations. Each confirmation means that an additional block has been added to the Bitcoin blockchain after the block that contains your transaction. Typically, it is recommended to allow at least three to six block confirmations before trusting that your received funds are secure.
Step Five: Spend Bitcoin
Once your received funds have been confirmed, a green deposit arrow will be displayed next to the transaction. Likewise, spent funds will have a red withdrawal arrow next to them once they have been confirmed.
As you make transactions from your wallet, they will appear in a list when you open your wallet. To spend bitcoin that is available in your wallet, simply select the “Send” button at the bottom of your screen.
You will be prompted for additional details on the next screen.
On the next screen, you will be asked for the Bitcoin address that you want to send funds to. You can either paste an address if you have copied one onto your clipboard, or you can select the “Scan” icon in the address dialog box to initialize your iPhone’s camera and physically scan a Bitcoin address QR code from someone that you are sending funds to.
Once scanned, the address text will be displayed in the address dialog box. It is important to check and double check that the address text matches the address you are trying to send funds to.
If you want, you can spend your wallet’s full balance by selecting the three-dot menu in the upper-righthand corner. Then select “Use Full Balance.” You will be asked to confirm that you want to spend the entire balance of your wallet.
Blue Wallet also has the option of advanced features like coin control, replace by fee and more from this menu.
Finally, you will be asked to select a miners’ fee rate. This is based on the data size of your transaction and is used as an incentive to get your transaction included in the blockchain more quickly. You can select from three predetermined speeds or you can choose a custom fee rate.
Once ready, confirm the details of your transaction one last time and then select the blue “Send now” button.
Your transaction will be broadcast to the Bitcoin network. Remember, if you are not using your own node, you are trusting someone else’s. Running your own node goes beyond the scope of this article but for some good resources check here, here and here.
Once your transaction has been sent, it will be displayed in your transaction list in your wallet.
You can also watch this video for more on installing and setting up Blue Wallet on iPhone.
Conclusion
Blue Wallet is a sleek and powerful wallet available on iPhone as well as Android. I only covered the iPhone application in this article.
Blue Wallet is packed with advanced features like user-provided entropy via dice rolls and coin toss, coin control, variable miners fees, duress wallet, and Lightning integration. But my favorite feature is the ability to handle partially-signed bitcoin transactions (PSBT). With PSBT, you can import your hardware wallet xpub and use Blue Wallet as a watch-only wallet. This allows you to monitor the balance on your hardware wallet while on the go as well as to generate receiving addresses for your hardware wallet. Watch-only wallets cannot spend from your hardware wallet, so your funds are always secure.
When you want to spend from your hardware wallet, you can enter the watch-only wallet in your Blue Wallet application, construct the spend transaction and then export it as a PSBT. Then you can load this PSBT into your hardware wallet via the MicroSD card option and sign the transaction with your hardware wallet’s private key. Once signed, the transaction can be passed back to your Blue Wallet and broadcast to the network.
You should now have a basic understanding of how to install Blue Wallet on your iPhone, how to secure your wallet’s 12-word seed phrase and how to receive/send bitcoin.
Bitcoin Wallets For Beginners, Part Four: Installing Sparrow Wallet
If you have a desktop computer, then I highly recommend using Sparrow Wallet. This article will walk you through the basic steps for installing, securing and using Sparrow Wallet on desktop. Sparrow is meant to connect to your own Bitcoin node, if you don’t have a node setup already then check out this guide by @BitcoinQ_A and also this guide is a great resource for Sparrow Wallet. Before getting started, it is a good idea to have a pen and paper ready. Remember to start with small amounts of bitcoin until these concepts make more sense and you are comfortable putting your funds in a mobile wallet. And always backup your seed phrase!
Step One: Install Sparrow Wallet
Sparrow wallet is a desktop software application that is designed to be used with your own Bitcoin full node. In this example, I connected it to my Raspberry Pi Bitcoin full node running Bitcoin Core. Sparrow Wallet can be downloaded from: https://sparrowwallet.com/
It’s good practice to verify any software that you download. I used Kleopatra. Verifying PGP signatures goes beyond the scope of this article, but it is a way that you can verify that you are downloading the purported software. For good software verification guides, check here and here for the basic concepts.
The TL;DR is: import the developers’ public key. Download the signed hash value. Verify the signature. Calculate the hash value on the executable file. And compare the checksums. When finished you should have a verified confirmation like this:
Now, I know that the hash values contained in the signed file are valid. Then I can compare those hash values to the .exe file I downloaded. If the signed hash value matches mine, then I can run the executable file in confidence.
Once installed, toggle to offline mode and select “Configure Server.”
Next, you can configure the general settings like bitcoin unit, preferred fiat currency, coin selection and notifications.
Then in the server settings section, you will want to enter your Bitcoin node’s local IP address and username/password.
If you haven’t done so already, this information first needs to be set up in your Bitcoin.conf file, which is typically accessible by running the following command from the same folder in which you have Bitcoin installed, in the terminal on your Raspberry Pi:
sudo nano bitcoin.conf
Once in your bitcoin.conf file, make sure you take the hashtag (#) off of your rpcuser and rpcpassword. Set them accordingly however you want.
You should be able to find your Raspberry Pi local network IP address by logging into your router. Then, make sure you have your local IP address notated so that you can enter the following information in the bitcoin.conf file:
rpcbind=127.0.0.1
rpcbind=192.168.0.11 (your node)
rpcallowip=127.0.0.1
Rpcallowip=192.168.0.12 (desktop)
After editing your bitcoin.conf file, save your changes, then you will need to restart Bitcoin.
Then, once it is back up and running, use the same rpcbind IP address as the URL with 8332 as the port. And use the same User/Pass that you entered in the bitcoin.conf file. Test the network connection from Sparrow Wallet. If it’s good, you should see the green check mark next to “Test Connection” and some information populated in the dialog box below that. Then select “Create New Wallet.”
If you get an error, you’ll have to shut down Bitcoin, edit the configuration file, start Bitcoin and try testing again. It took me a few tries to get everything correct because I’m not very good at network configurations.
More details can be found on Sparrow Wallet’s website here.
Step Three: Wallet Setup
Sparrow Wallet has several wallet configuration options available. You can use Sparrow Wallet to connect a hardware wallet, an air-gapped wallet and a watch-only wallet. You can choose different script types if you want legacy addresses that start with “1” or nested-SegWit addresses that start with “3.” You can also set up multi-signature policy types. There are a lot of options.
To make a new single signature P2WPKH (Native SegWit) wallet — addresses that start with “bc1” — select “New or Imported Software Wallet.”
On the next screen, you can select how many words you want in your seed phrase. I recommend just sticking with 24 seed words.
Then, select “Generate New.”
Step Four: Secure Your Seed Phrase
Sparrow Wallet will generate your 24-words and then you can add a passphrase.
I recommend using a strong, high-entropy passphrase that cannot be guessed easily like this one. Others may suggest using a passphrase that can be easily memorized. Weigh the tradeoffs for yourself and do what is best for you. Whatever you choose, remember that this passphrase will be necessary to recover your wallet in the event that your desktop is lost, damaged or replaced.
Note: This is the most important step.
Write down your words in order on a piece of paper
Secure this piece of paper as if it were gold or jewelry
Do not screenshot these words
Do not save these words in a computer or on your phone
Do not say these words out loud
Never share these words with anyone for any reason
Your bitcoin is only as secure as your 12 words and passphrase.
Double check your work
You will also need your passphrase from above for a complete secure backup.
Then, select “Confirm Backup” and then you will be asked to re-enter all of your words and passphrase to verify that you wrote them down.
You will need all of your seed words in the correct order and your passphrase to restore your wallet.
Note: Once you get more serious about Bitcoin, consider securing your seed phrases in metal instead of on paper.
Step Five: Finalize
On the next screen, you will be asked if you want to use the default derivation path. I recommend leaving the derivation path as the standard m/84’/0’/0’.
Then, select “Import Keystore.”
After the import is complete, make note of the master fingerprint. This is how you can confirm that you have restored the correct wallet in the future. This fingerprint is unique to your wallet accessed by your 24 words and passphrase.
Then, select “Apply.”
You will also be asked to name your wallet and set an optional wallet password. The password is what encrypts your wallet file on your computer. This is different than your passphrase, which acts as a “twenty-fifth word” for your wallet seed phrase.
Your node will automatically scan your new wallet to see if you have any funds. Once your node is done scanning your new wallet, you can start generating receive addresses and get some bitcoin.
Step Six: Receive Bitcoin
Wait until your node is finished scanning. Then by navigating to the “Receive” tab, you can select the “Get Next Address” button to generate your first receiving address. Now you can scan your QR code with your mobile wallet or copy/paste the address and send it to someone for payment. Sparrow Wallet displays additional information about your address like the derivation path, the script and the descriptor.
I sent some bitcoin from one of the mobile wallets generated in the previous guides. Once your receipt is confirmed, you can see all kinds of details about your transaction.
Sparrow is like its own block explorer using your node.
You can also explore the inputs in further detail:
You can also explore the outputs in further detail:
Step Seven: Send Bitcoin
Once you’re ready to spend, navigate to the “Send” tab. There, you can add several receivers in the same transaction by either copy/pasting the receiver’s Bitcoin address or by activating your computer’s camera to scan a Bitcoin address QR code.
You can add a label if you like, enter the amount you wish to spend and you can easily slide the miners fee to where you want it.
Sparrow Wallet maps out a little graph with the mempool.space data as well to help you estimate how fast your transaction will be included in the blockchain. There is a little transaction connection graph displayed as well.
Once everything looks good, select “Create Transaction.”
On the next screen, review the details. You can even add a transaction delay based on block height or date.
Once ready, select the “Finalize Transaction for Signing” button.
Then, select the “Sign” button and enter your wallet password, if you enabled this feature.
Once signed, the transaction is ready to be broadcast. Select the “Broadcast Transaction” button to send it to the Bitcoin network.
Once broadcast, your node will send the transaction to other nodes on the Bitcoin network until it gets pulled out of the mempool and mined into a block.
Conclusion
Sparrow Wallet is a beautifully-designed Bitcoin wallet packed full of features. This wallet supports single-sig or multi-sig, multiple address types, multiple node connection options, coin control, transaction labeling, built-in Tor and Testnet. Additionally, Sparrow Wallet supports partially-signed bitcoin transactions (PSBT).
With PSBT, you can import your hardware wallet xpub and use Sparrow Wallet as a watch-only wallet. This allows you to monitor the balance on your hardware wallet more conveniently as well as generate receiving addresses for your hardware wallet. Watch-only wallets cannot spend from your hardware wallet so your funds are always secure. When you want to spend from your hardware wallet, you can enter the watch-only wallet in your Sparrow Wallet application, construct the spend transaction and then export it as a PSBT. Then, you can load this PSBT into your hardware wallet via the MicroSD card option and sign the transaction with your hardware wallet’s private key.
Once signed, the transaction can be passed back to your Sparrow Wallet and broadcast to the network. Plus, it has an integrated blockchain explorer powered by your own node. There is too much to unpack in this article, but check out Sparrow Wallet’s full features page here.
There is a great best practices guide on Sparrow Wallet’s website here.
To learn more about Sparrow Wallet, jump in its Telegram group here.
To hear what’s up directly from the source, check out this episode of Citadel Dispatch by @matt_odell featuring Sparrow Wallet’s lead developer, @craigraw and yours truly, @econoalchemist.
Bitcoin Wallets For Beginners, Part Five: Buying KYC-Free Bitcoin
Source
Now that you understand the importance of self custody and the dangers of KYC, and have installed a mobile or desktop wallet, here is how you can start getting bitcoin safely and privately.
There are many ways to get non-KYC bitcoin. You can earn it in exchange for goods and services. You can mine it at home. You can buy it at an ATM. Or you can buy it on a peer-to-peer exchange. This article will show you how to buy a small amount of bitcoin at an ATM, install and set up Bisq and then use the bitcoin to fund your first Bisq trade.
Step One: Buy Bitcoin At An ATM
If you followed the instructions in part two or part three of this series, then you now have a fresh mobile Bitcoin wallet. Take your mobile wallet with you to the Bitcoin ATM so that you can deposit your funds onto your mobile wallet.
Make sure that you have cash on hand. The majority of Bitcoin ATMs will have varying levels of KYC requirements based on dollar-amount thresholds. These thresholds can vary by jurisdiction or ATM operator or a number of other factors. Typically, if you are buying between the $1 to $500 range, the only requirement will be a phone number for a text verification.
Consider using a burner phone number for this to preserve your privacy and not have any Bitcoin ATM transactions potentially traced back to your name through your mobile service provider.
Next you will need to find an ATM near you. I like Coin ATM Radar because it has a handy mobile app and there are a lot of good resources about the Bitcoin ATM industry on its website.
With your mobile phone and cash, travel to your desired ATM location, being cautious of security cameras at the place of business that may capture your license plate. Consider parking a couple of blocks away, out of view of surveillance cameras, and walking the rest of the way.
Once you approach the Bitcoin ATM machine, the basic steps are as follows:
Touch screen to begin
Select “Bitcoin”
Input a phone number
Verify the code that was sent via text message
Display the receiving address QR code on your mobile wallet
Insert your cash
Print the receipt
You can expect the funds to arrive in your wallet within 1 – 3 hours typically
Here is a video of the whole process.
Now that you have your first little bit of bitcoin, you can go home and setup your Bisq client and then use this bitcoin to fulfill your escrow requirement on your first Bisq trade. I recommend getting at least 0.0075 BTC from the ATM, you may need to make multiple trips. This should be more than enough to fund the security deposit of your first trade as well as cover the trading and miners’ fees.
Step Two: Download Bisq
Bisq is a decentralized peer-to-peer network of bitcoin traders. Buyers and sellers from all around the globe can find each other over Tor on Bisq to trade safely without the coordination of a central authority or the need to expose sensitive KYC information to large corporations.
Bisq has many trading pairs, such as USD to bitcoin, euro to bitcoin and many more. There are also many different payment options, such as Amazon gift cards, Revolut, Uphold and more.
The basic idea is that you find or post a trade in the currency pair that you want and for the payment method that you want. Once the trade is initiated, both trading peers deposit a small amount of bitcoin in escrow as a security deposit. You exchange fiat payment with your trading peer out of band. Once both peers confirm the trade is complete, you receive your purchased bitcoin plus your security deposit to your Bisq wallet. From there, you can send your non-KYC bitcoin wherever you like; to your mobile wallet, your desktop wallet or a hardware wallet.
Navigate to the Bisq website to download the software for your operating system.
Keep in mind that your trade is only available to the rest of the peer-to-peer network when your instance of the Bisq application is running and connected to the internet. You may want to install this on a computer that you can leave running.
After you have downloaded the program, install it by running the executable (Windows) or other (macOS or Linux) installation methods. If you are familiar with verifying software, do so at this point. I recommend that you learn about PGP keys/signatures by checking here and here for the basic concepts.
After you have run the Bisq installer, followed all of the prompts and agreed to use them, Bisq is going to connect to a few Tor nodes and connect to a few Bitcoin nodes. This can take a couple minutes. Once everything is synchronized, you should see something like this:
Step Two: Set Up A Bisq Bitcoin Wallet
You will need a Bisq Bitcoin wallet so that you can fund your security deposits for your trade escrow requirements. This wallet will be set up in a similar way to the other wallets we have discussed in previous parts of this guide.
Navigate to the “Account” tab, and then the “Wallet Seed” tab. You will receive one warning that it is recommended to make a backup of the Bisq files on your computer. Then you will receive another warning that you have not created a password yet. You will do that in the next step.
Write down your seed words on a piece of paper, along with the wallet date. You will need both pieces of information to restore your Bisq wallet in an emergency. The same best practices apply to this wallet as you learned with the other wallets:
Note: This is the most important step.
Write down your words in order on a piece of paper
Secure this piece of paper as if it were gold or jewelry
Do not screenshot these words
Do not save these words in a computer or on your phone
Do not say these words out loud
Never share these words with anyone for any reason
Your bitcoin is only as secure as your 12 words and passphrase.
Double check your work
You will also need your wallet date from above for a complete secure backup
Note: Once you get more serious about Bitcoin, consider securing your seed phrases in metal instead of on paper.
You will need all of your seed words in the correct order, wallet date and your password to restore your wallet.
After you have secured your seed words and wallet date, now you can set your wallet password. This will encrypt your Bisq wallet information on your computer.
Navigate to the “Wallet Password” tab.
Set a strong password that cannot be guessed and is at least eight characters long. Once you type your password in, you will be warned that this will encrypt your wallet information on your computer and that you will need your password to view your seed words in the future. Make sure that you secure this password like you did with your seed words and wallet date.
Step Four: Fund Your Bisq Bitcoin Wallet
Now that you have set up your Bitcoin wallet, you can navigate to the “Funds” tab and then the “Receive Funds” tab under that. This is where you can find the QR code for your first Bisq receiving address.
Using the mobile wallet that you used to deposit your funds from the Bitcoin ATM, send those funds to this wallet now. Once you have received a few confirmations on your Bisq wallet deposit, you are almost ready to make your first Bisq trade.
Step Five: Set Up A Fiat Currency Payment Method
In order to make trades on Bisq, you will need to set up a fiat currency payment method so that trading peers can agree to this payment method when trading with you.
Navigate to the “Account” tab and then the “National Currency Accounts” tab below that. Then, you will want to click on the “Add New Account” button.
This will populate a drop-down menu where you can find all of the supported fiat currency accounts in Bisq. Select the account that matches your available options.
Next, you will need to enter all of your information correctly. When you make a trade on Bisq, your trading peer will need certain information about you in order to send you money out of band via the payment method you have selected. It is important to note that certain information about you will be exposed to your trading peer. However, this is necessary to make the out-of-band payment and it has minimal effect on you, considering that it is only to one other person.
Note: Consider establishing an LLC through a registered agent to keep your personal name off of the public record and to protect your identity and privacy by using the company name on your national currency account through your business bank account.
Once you have entered your details, select “Save New Account”. You are ready to start trading.
For most national currency accounts that you set up in Bisq, they will initially be throttled to 0.01 BTC trades, for example. These limitations vary depending on the account type, so be sure to familiarize yourself with the account signing and aging requirements here.
Once you have completed a successful trade with a peer who has a signed and aged account, then they can sign your account. Once your account is signed, a 30-day timer will start. Once you have reached 30 days, then your initial 0.01 BTC limit is raised to 0.125 BTC, for example. Then, after 60 days, all limits on your account are lifted and you are only restricted by the limitations of your payment method.
Step Six: Make Or Accept A Trade
Now you can navigate to the “Buy BTC” tab and see all of the available offers to sell your bitcoin. You can filter this list by your payment method or currency type. Be mindful of the percentage over the market price. Once you see an offer that is satisfactory, you can take it by selecting “Take Offer To Buy BTC.”
Alternatively, you can make an offer to buy bitcoin by selecting the “Create New Offer To Buy BTC” button in the upper-righthand corner. Then you can enter your desired trade details, such as your out-of-band payment method, the amount of bitcoin and the percentage above or below the market price you are willing to pay. You can even set a trigger price to turn the trade off if bitcoin hits a specified price.
You will see at the bottom that for a 0.01 BTC trade, there is a 0.006 BTC security deposit required. This is why you deposited the bitcoin from your ATM purchase into your Bisq wallet. Once you post this trade, Bisq will transfer your security deposit, trading fee and miners’ fee out of your Bisq wallet and into escrow. Once the trade is complete, you will receive your 0.006 BTC security deposit back.
Follow the prompts to make your trade viewable to the other peers and leave your instance of Bisq and your computer running and connected to the internet until someone takes your trade.
Once your trade is taken, you will start receiving notifications in Bisq, alerting you as to the trade’s progress. Typically, each trade is given a predetermined amount of time to complete. And there is an option to send a message to your trading peer.
You can monitor your trades under the “Portfolio” tab. Your “Open Offers” are trades you have posted that are still waiting to be taken. The “Open Trades” tab is where you will find your trades that are in progress. And the “History” tab is where you can find all of your trade history.
There is Bisq arbitration standing by in the event that something goes wrong with a trade. If you stick to the rules, follow the instructions and operate within the time limitations, then you should never have a problem.
Once your trade has been completed, use the bitcoin you purchased to fund more security deposits for more trades and keep this up until you have reached your goals. It is a good idea to send your Bisq funds to Whirlpool to break the deterministic links to prior transaction history.
Conclusion
Buying bitcoin at an ATM has a high premium, but you only need to do it with enough money to get your first Bisq trade funded. From there, you have way more control over the prices that you pay. You can set orders on Bisq below the market price and wait for peers to take your trade.
Even though there is no central authority with Bisq, you are still exposing minimal information to a stranger on the other side of your trade. I recommend taking every privacy precaution you can to protect yourself. Having an LLC is a great way to interact with the world in a private manner.
There are a ton of features on Bisq that I did not cover here because I just wanted to show you the basics to get started. You can save on trading fees by using the Bisq token, BSQ, and you can use mempool.space as a BSQ block explorer. You can connect Bisq to your own Bitcoin node. There is a mobile app you can use to receive notifications on the go of your trade progress.
Bisq is an open-source project, check out its website to learn more. There is also a Bisq Wiki packed full of all of the information that you need to use Bisq. If you ever have any questions, jump in the Bisq Telegram channel here for community support.
This is a guest post by Econoalchemist. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc or Bitcoin Magazine.
This article is part two of a five-part series designed to demonstrate to Bitcoin beginners how to install, secure and use a Bitcoin wallet. This second part of the series covers installing Samourai Wallet on Android.
Find part one of the series here.
If you have an Android mobile phone, then I highly recommend using Samourai Wallet. This article will walk you through the basic steps for installing, securing and using Samourai Wallet on Android. Before getting started, it is a good idea to have a pen and paper ready. And Remember to start with small amounts of bitcoin until these concepts make more sense and you are comfortable putting your funds in a mobile wallet. And always backup your seed phrase!
Step One: Install Samourai Wallet
Samourai Wallet can be downloaded from its website or F-Droid, compiled from source code or installed directly on your Android device from Google Play Store.
For the simplistic and basic purposes of this guide, I’m only going to cover the installation instructions from Google Play Store. Be aware of malicious apps that may look similar, ensure that you are getting the Samourai Wallet app with over 100,000 downloads.
From your Android device, navigate to the Google Play Store app and then search for Samourai Wallet and install it, then open it.
Step Two: Allow Permissions
Allow camera permission for the app and operating system (OS). This allows for QR code scanning. Then, Allow read/write permission for the app and OS. This allows the encrypted backup file to be saved.
Step Three: Enable Tor
Make sure you enable Tor by moving the slider to the right. Wait for the confirmation, this allows app communication over Tor.
Note: If you have a Dojo, this is the step at which you would connect it. Keep in mind that, although running your own node is an advanced topic, it is highly recommended that you learn about it. If you do not use your own node, then you are trusting someone else’s node. There are many full node implementations available. This goes beyond the scope of this article but for some good resources, check here.
After enabling Tor, Select “START NEW WALLET.” Once installed, your Samourai Wallet will save an encrypted backup file to your Android device.
Step Four: Create A Passphrase And PIN
Next, you will be asked to create a passphrase. This is the passphrase that encrypts your backup file and your wallet’s BIP39 passphrase, also known as your “thirteenth word.” Any combination of numbers, letters and special characters is acceptable. I suggest trying to use a high-entropy password that cannot be guessed, such as one from a random password generator. Others may suggest using a passphrase that can be easily memorized. Weigh the tradeoffs for yourself and do what is best for you. Whatever you choose, remember that this passphrase will be necessary to recover your wallet in the event that your mobile phone is lost, damaged or replaced. Confirm acknowledgement that no one can help you recover this passphrase, then select “Next.”
Next, create a PIN code for accessing the app. If someone were to gain access to your Android phone, then this PIN code will protect your wallet. Any combination of numbers between five and eight digits will work. Try to use a PIN that cannot be guessed. Once entered, you will be asked to confirm the PIN code. Then select “Next.”
Step Five: Secure the Seed Phrase
Note: This is the most important step.
Write down your words in order on a piece of paper
Secure this piece of paper as if it were gold or jewelry
Do not screenshot these words.
Do not save these words on a computer or on your phone
Do not say these words out loud
Never share these words with anyone for any reason
Your bitcoin is only as secure as your 12-words and passphrase.
Double check your work, then confirm acknowledgement that you have secured your 12 words
Select “RETURN TO WALLET”
You will also need your passphrase from above for a complete secure backup
Note: Once you get more serious about Bitcoin, consider securing your seed phrases on metal instead of on paper.
Step Six: Claim Your PayNym
Each Samourai Wallet user gets a unique “PayNym.” This can be used to collaborate with other Samourai Wallet users in cahoots transactions, to post public payment codes without revealing transaction history and more.
Select “CLAIM YOUR PAYNYM” at the bottom of the screen. Then select “YES” to claim your new PayNym.
Step Seven: Receive Bitcoin
There are different ways to receive bitcoin to your new wallet. From your wallet home screen, select the blue plus (+) sign and then select the green “Receive” piggy-bank button. This will bring up your first receiving address QR code. Or, to receive from another Samourai Wallet user, you can select the purple “PayNyms” icon instead, which will allow you to share the payment code in QR format or in text. Once you and another Samourai Wallet user follow one another’s PayNyms, then you can collaborate in cahoots transactions together.
The person sending you bitcoin can scan your wallet address QR code and spend from their wallet.
For example: Samourai Wallet users can collaborate in privacy-enhancing transactions like Stonewallx2. Using your bitcoin address QR code as the receiver, your sender can use their PayNym to collaborate with others to send you funds more privately. With the bitcoin address displayed above, the receiver has now been given 0.015 BTC from a privacy-enhancing Stonewallx2 transaction.
Once you have an unspent transaction output (UTXO) in your wallet like this, you can easily click on it and view more details. You can even open the transaction identification (TXID) on a block explorer and see even more details.
Below is how the transaction looks on-chain. Eight inputs, four outputs, in this example. Two of the outputs are identical, one is the actual spend and the other is a decoy. The common ownership heuristics have been broken. This is one way that privacy can be enhanced with these tools.
Step Eight: Spend Bitcoin
Find a collaborator and create a privacy-enhancing transaction with another Samourai Wallet user to send to any third party. First, select the blue “+” sign, then select the red “send” button, then enable cahoots.
Next, select “STONEWALLx2” and then select “Online” for the participant.
You and your collaborator should be following one another’s PayNyms, and then you can select your collaborator’s PayNym from your contact list. Then select the square-looking icon at the top to open your camera and scan the QR code from the person receiving your payment (a Blue Wallet user, in this example). Then, fill in the amount to send, 0.01 BTC in this example. Finally, select “REVIEW TRANSACTION.”
Next, you will be able to select your miner’s fee rate. Set it higher for more urgent payments accordingly. Once you begin the Stonewallx2 transaction, Samourai Wallet will exchange details of the transaction between the two collaborators’ wallets. This process is encrypted over Tor on the Soroban communication layer. You’ll get one last chance to review your transaction before broadcasting. The receiver should see a pending transaction arrive within moments.
You can also watch this demonstration video for installing Samourai Wallet on an Android for the first time here:
Conclusion
Samourai Wallet is a privacy-focused Bitcoin wallet that is most popular for its CoinJoin implementation, Whirlpool. Additionally, Samourai Wallet has post-mix cahoots spending tools like Stowaway and Stonewallx2. These collaborative transactions break common input ownership heuristics by obfuscating the true amount being sent and using decoy outputs.
Samourai Wallet was also the first Bitcoin wallet to implement BIP47, which enables users to share a payment code without exposing additional wallet details, enhancing privacy. Also, Samourai Wallet never reuses address and segregates toxic change and it has coin control and other advanced features. Your Samourai Wallet can also be connected to your own Bitcoin full node by using Ronin Dojo; another developer team that has built a powerful Bitcoin full node stack that is designed specifically for integrating with your Samourai mobile wallet and your desktop Whirlpool client. All communications in the Samourai Wallet/Ronin Dojo stack are routed over Tor by default.
To learn more about using Samourai Wallet, jump in its Telegram channel here.
You should now have a basic understanding of how to install Samourai Wallet on your Android, how to secure your wallet’s 12-word seed and passphrase and how to receive/send bitcoin in a privacy-enhancing way.
This is a guest post by Econoalchemist. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc or Bitcoin Magazine.
When it comes to defensively guarding the privacy of Bitcoin users, Samourai Wallet has been on the bleeding edge for many years, bringing new features and improvements to users that help achieve anonymity through Whirlpool, its CoinJoin implementation, and to maintain privacy with spending tools like Stowaway, Stonewallx2, Ricochet and PayNyms. Samourai Wallet is also the only Bitcoin wallet to date that has implemented BIP 47.
Additionally, it recently implemented the app-agnostic, Tor-based communication layer Soroban. Soroban brings tremendous UX improvements to users engaging with its collaborative transaction framework, “cahoots,” with tools like Stowaway and Stonewallx2. (Read more about Cahoots transactions and the UX evolution of building the transactions manually versus using Soroban here.)
Maintaining privacy while using Bitcoin requires paying close attention to the way your transactions are being built; which inputs are being used and what kind of history your inputs are bringing with them. Common input ownership heuristics (CIOH) are used by chain analysis companies to surveil Bitcoin users. These heuristics make the assumption that when there are multiple inputs to a Bitcoin transaction, those inputs belong to the same entity. Techniques can be used to break these assumptions, thus rendering the ability of a chain analysis company to maintain such assumptions utterly indefensible.
One technique used in the fight for privacy is a tool brought to you by Samourai Wallet called Stowaway. When someone wants to enhance their privacy while sending bitcoin, they can choose to use Stowaway, which will obfuscate the amount of bitcoin being sent in the transaction.
For example, if Bob wants to send Alice a Stowaway transaction of 0.015 bitcoin, they will both collaborate by providing inputs to the transaction. Then, one output will be given back to Bob as his change and the other output will be given to Alice with her contribution and payment. However, none of the inputs or outputs will match the 0.015 bitcoin amount.
It is necessary for Alice and Bob to communicate the timing of their transaction out of band, meaning that, in the examples below, Bob will have contacted Alice using a communication method outside of the Samourai Wallet application, such as a phone call, an end-to-end encryption text, a secure email, etc.
To an external observer of Alice and Bob’s transaction, there is no way of determining the actual amount that was sent. The external observer can also no longer make any assumptions about the ownership of inputs and outputs to the transaction. When the external observer looks at Alice and Bob’s transaction on-chain, this is what they will see:
Cahoots transactions can be built between collaborators using Soroban, which makes the process much faster and smoother. Soroban communications happen over Tor. Here is a video example of Alice and Bob’s Stowaway transaction (this video can also be found on Samourai Wallet’s YouTube channel here, and with Spanish subtitles here.)
Alice and Bob have enhanced their privacy by breaking the common input ownership heuristics. Now, any multi-input transaction being looked at by a chain analysis company must be considered to have been a cahoots collaboration.
Here is a detailed Stowaway infographic designed by @BitcoinQ_A, which can also be found here among many other great resources:
Learn More With #GretasFury
There is growing interest from the Bitcoin community in privacy enhancing tools like Stowaway, PayNyms and BIP 47. On February 28, 2021, a group of Bitcoin privacy advocates launched operation #GretasFury. Designed to interrupt common input ownership heuristics by passing a payment torch of 1 sat transactions using Stowaway, operation #GretasFury brought together dozens of users from around the world. Each collaborator anonymously participated in the torch passes by using their PayNyms. Each Stowaway transaction that was made utilized Soroban communications over Tor. Participants managed the timing of their transaction with out-of-band communications over applications like Telegram and Matrix.
Operation #GretasFury was organized by @biTcOinEneMiEs who maintains bitcoinenemies.com, an awesome self-hosted website focused on sharing Bitcoin related privacy resources, projects, and community engagement. Operation #GretasFury was a terrific way to motivate people to try out some of the available privacy tools in a way where there was a lot of community support and many seasoned participants available to answer questions and not only pass the 1 sat torch but to pass the torch of knowledge to new users.
Various sponsors donated prizes to the event to generate a sense of friendly competition as well.
I had a chance to ask @biTcOinEneMiEs a few questions about the event and here is what we discussed:
What made you want to put operation #GretasFury together?
We had a lot of fun with PayNym Torch. BIP 47 changes bitcoin UX in a profound way. When Soroban was released by Samourai Wallet, it presented an opportunity to pass a PayNym torch without the commit transaction.
Soroban also eliminated QR code workflow for Stowaway and Stonewallx2 transactions. That was a much bigger deal. These transactions are nothing new, but suddenly a massive friction is gone. Without going into all of the reasons why cahoots transactions are amazing, we had to follow it up. If you thought PayNyms were cool, wait until you try them with Soroban and cahoots without a commit transaction.
Who were your sponsors?
This all transpired in Keybase’s tx_tricks in December. The group did its first Soroban Stonewallx2, and the idea of a torch came shortly after. We kicked around some ideas before @SamouraiDev inspired us with the 1 sat Stowaway.
See Also
We didn’t contact sponsors until a couple of days before launch. I wasn’t sure what we’d really get but it was a massive outpouring of support, no questions asked. Fifteen different sponsors have contributed already. Big thanks especially to Mamushi Mobile for the Copperhead Pixel, Ronin for its new node and Foundation for two of its new Passports. These guys have really upped the excitement around #GretasFury.
How many participants and passes of the torch have you seen?
We’ve had 33 participants and 83 passes.
Why should people care about common input ownership heuristics?
These are techniques used in chain analysis. The most nefarious use them everyday. False positives are rampant, but this won’t prevent the analysis from being used until it stops working for more than just the criminals. Average people need to say no as well.
CIOH can be crushed. The people that need to do so already are. It’s within our grasp too, with tools like Soroban Stowaway. An average Joe can pull that off today.
#GretasFury lets us learn this in a fun way, and together, send the signal of just how worthless CIOH are to catching bad guys.
In conclusion, use the tools. There are some amazing resources out there that significantly improve your privacy and help you achieve and maintain your anonymity. It is a lot easier to form good habits from the beginning rather than trying to break bad habits down the road. If you are new to Bitcoin, I encourage you to really think about the advantages of keeping your KYC out of Bitcoin and defensively guarding your privacy.
To learn more about the tools Samourai Wallet offers, check out its website or engage with the Samourai Wallet community on its Telegram channel. Or, if you’re interested in getting an overview of the Samourai Wallet and Ronin Dojo full stack, check out this guide.
A version of this article can be found on Twitter as a thread here.
This week, open-source Bitcoin and Lightning Network node developer Umbrel released a significant update to its operating system, bringing a list of notable improvements to its wallet and UX, plus several additions to its celebrated Umbrel App Store.
The Umbrel App Store was released December 2020 and has brought single-click installation of some of the most popular Bitcoin apps since then. This latest update brings the addition of Samourai Server, a mempool.space explorer and LNBits.
Folks, it is time to once again push the limits of what you can do with your #Bitcoin node.
Announcing Umbrel v0.3.3 with 3 brand new apps in the Umbrel App Store — Samourai Server (Dojo + Whirlpool), Mempool, LNbits — a redesigned wallet connector, Lightning Pool, and more! 🚀 pic.twitter.com/8QktH44XZS
— Umbrel ☂️ (@getumbrel) February 15, 2021
The Umbrel v0.3.3 operating system update also allows users to easily connect to an external wallet to monitor and send transactions. This update also integrates the latest versions of Bitcoin Core (v0.21.0) and LND (v0.12.0).
About The Apps
Samourai Server is an exclusive, Umbrel-only app that runs both Samourai Dojo and Whirlpool out of the box, and provides easy, step-by-step instructions to the user so they can effortlessly connect their Samourai wallet. This represents the highest-level of privacy that you can achieve as a Samourai Wallet user, because you no longer have to trust its servers with any of your data. Also, with Whirlpool, your Umbrel can now mix your bitcoin at any time.
Mempool is the self-hosted version of the mempool.space Bitcoin blockchain explorer. It brings all of the features of mempool.space to your Umbrel app, allowing you to use your Bitcoin node as a full-fledged explorer, visualize the mempool and get on-chain fee estimates.
See Also
With LNbits, users can onboard their friends and family members to the Lightning Network relatively easily by hosting their wallets directly through Umbrel, without them having to worry about running a Lightning node or managing channel liquidity.
Most Bitcoin and Lightning wallets have their own unique procedures for connecting to a personal Bitcoin node, and there isn’t a standard protocol. Some require additional steps, such as installing Tor, and some don’t, but the process isn’t obvious to most non-technically inclined people. The new wallet connector in Umbrel v0.3.3 provides easy to follow, step-by-step instructions for connecting most of the popular Bitcoin and Lightning wallets, like Electrum, Wasabi, Zap and BlueWallet.
Combined with the seven apps that launched with the Umbrel App Store a few weeks ago (BTCPay Server, Specter Desktop, Sphinx Relay, RTL, Lightning Terminal, ThunderHub and BTC RPC Explorer), this latest update further solidifies that one-click install financial self-sovereignty is no longer a far-fetched dream with Umbrel.
