[Orca]

https://vanitycrypto.com/
Turbo Generator

Quickly and easily generate a cryptocurrency address right here in your web browser without any downloads or payment information! With this tool you can quickly generate a custom bicoin wallet address, and many more! Use this for your bitcoin wallet.

[Kill Joy]

Please fix the link in the OP.

Users be aware that a 3rd party is generating the private key for any address given out. There are safer methods for doing this.

[Orca]

Please fix the link in the OP.

Users be aware that a 3rd party is generating the private key for any address given out. There are safer methods for doing this.

Hi Kill Joy,

Thank you for notifying me to the broken link.

I appreciate the warning, but with our methods we never actually get access to your private keys. We use a split-key system - there is no safer method for doing this. 🤝

[Orca]

there is. offline bruh.

Offline is not a service - nor would it provide any more security than a cryptographically secure split-key generation

[cryp]

DO NOT USE THIS. It is a public 3rd party wallet generation site.

USE VANITYGEN. OFFLINE.
https://en.bitcoin.it/wiki/Vanitygen
https://github.com/samr7/vanitygen

[Orca]

Thank you for the feedback, but why do you recommend they not use it if we have a secure split-key implementation?

Surely you are referring to services that do not use this feature. 🤝

[XMR]

Thank you for the feedback, but why do you recommend they not use it if we have a secure split-key implementation?

Surely you are referring to services that do not use this feature.  🤝

There is nothing stopping you from generating the real private key, saving the real one, then encrypting it with the user's public key and sending them that. There is no known secure way to have someone else generate private keys for you, because you should never trust someone else with your private keys.

Anyone reading: do not trust any online service with your keys. If you can't generate your own vanity addresses, you're better off without them.

Offline is not a service - nor would it provide any more security than a cryptographically secure split-key generation

Actually yes it would be more secure. It is extremely easy to backdoor a website or implement something like what I've outlined above. It's a lot harder to backdoor a specific computer, let alone the thousands of computers who would be generating their own addresses rather than trusting an online service to do it for them. At that point, you're practically asking to get robbed.

[Orca]

There is nothing stopping you from generating the real private key, saving the real one, then encrypting it with the user's public key and sending them that. There is no known secure way to have someone else generate private keys for you, because you should never trust someone else with your private keys.

Anyone reading: do not trust any online service with your keys. If you can't generate your own vanity addresses, you're better off without them.


Actually yes it would be more secure. It is extremely easy to backdoor a website or implement something like what I've outlined above. It's a lot harder to backdoor a specific computer, let alone the thousands of computers who would be generating their own addresses rather than trusting an online service to do it for them. At that point, you're practically asking to get robbed.

Hi XMR,

Thank you for the feedback. While your claims may be true for non split-key generation that is not the case for split-key generation.

When using split-key generation, we never even have access to your keys so backdooring is mathematically impossible.

We will be providing more information on split-key on our website soon. 🤝

[JoeJonas]

ya op sorry but no one ever is using this as takes 2 mins for you to steal a users bitcoin. even with your "split key tech"

[Orca]

ya op sorry but no one ever is using this as takes 2 mins for you to steal a users bitcoin. even with your "split key tech"

We have thousands of people using it. And no it's not possible for us to steal your key.

Thanks for the feedback 🤝

[Kill Joy]

Split-key is way safer but I will look into how you are doing it myself later and may redact what I said.

[Orca]

Split-key is way safer but I will look into how you are doing it myself later and may redact what I said.

Much appreciated 🤝 🤝

[XMR]

Hi XMR,

Thank you for the feedback. While your claims may be true for non split-key generation that is not the case for split-key generation.

When using split-key generation, we never even have access to your keys so backdooring is mathematically impossible.

We will be providing more information on split-key on our website soon.  🤝

I don't think you understand. Split key generation still has you generate the private key. You then encrypt it with the user's public key. Between these steps, you have access to the unencrypted private key. Nothing is stopping you from saving it and sending the user the encrypted one.

Again, if you can't generate your own vanity addresses, you're better off without one.

[Orca]

I don't think you understand. Split key generation still has you generate the private key. You then encrypt it with the user's public key. Between these steps, you have access to the unencrypted private key. Nothing is stopping you from saving it and sending the user the encrypted one.

Again, if you can't generate your own vanity addresses, you're better off without one.

Hi XMR,

That is incorrect and not how split-key works.

With split key we never have access to your private key.

The process you described is called SSL, and we use that also by default.

Best,
Nick

[l0lwtf]

The process you described is called SSL, and we use that also by default.

SSL no longer exists. There is TLS.