Skip to content
Plebum Dominium

11 · Plebum Dominium

Blind the wallet map

Encrypt the descriptor. Do not write xpubs in plain text.

Download PDF

The map is not a seed. Plain text xpubs still show the money.

Terms

  • Descriptor. The wallet map. Not a seed.
  • xpub. A watching key. Not a seed.
  • Passphrase. Opens the map file. Not a seed.
  • Plain text. Anyone who finds it can read it.

Short steps

  1. Boot Tails with networking off.
  2. Do not write xpubs on paper.
  3. Save the descriptor as map.txt.
  4. Run gpg --symmetric map.txt.
  5. Use a long passphrase. Not from the plates.
  6. Write that passphrase on separate paper.
  7. Keep that paper away from the plates.
  8. Keep map.txt.gpg. Delete map.txt.
  9. Store the encrypted file on two USBs.
  10. Decrypt once later. Confirm the map opens.
  11. Do not invent a paper cipher.