For example cryptocurrency wallet seed phrase. One can add it to the notes field (password field is occupied by my wallet password).

I can also add new field of type “hidden” to the login entry, where i need to click eye icon in order to reveal the content.

Beside login items, there are also Notes items, which does not seems to feature hidden field.

I assume that in terms of security all field types (password, note) and all entries (login, note) are equally secured.

But the field which is not password or a hidden note of the login item, are more vulnerable due to someone look behind your back or due to a computer client-side scanning (spyware third party or built in OS made to screenshot ones screen)?

What is your suggestion on storage of a super-sensitive data like crypto. wallet seeds?

  • jjpamsterdam@feddit.orgEnglish
    1·
    5 days ago

    For me it boils down to trust in the service provider (in this case Proton) and the risk of anyone accessing your information. While your proposed solution is elegant and super accessible, it’s not without risk.

    Relevant risks could include your device being screen- or keylogged or even the TSA randomly selecting you and forcing you to open up your phone under the implied threat of a free vacation to El Salvador.

    For super sensitive data that can be memorised, I recommend memorisation. You can keep a backup hard copy in a safe place, even if that’s not immediately accessible. This should also be accessible for your relatives in case of death. Such a safe place can be a safety deposit box or even just a trusty old envelope stashed away behind a specific drawer.

    For sensitive but not super sensitive data that you need on the go I recommend using an encrypted hard copy, which you can keep in your purse or wallet. Use any publicly available (long enough) document as your cypher, such as the Magna Charta or the Declaration of Independence (although I recommend more obscure texts, obviously). You can even use the cypher method for digital sensitive data if you prefer that. As long as you don’t tell anyone about your cypher you should be fine. It can still be brute forced, but should be really difficult if you use the right cypher.

      • Ulrich@feddit.orgEnglish
        1·
        5 days ago

        I can’t think of a safer place to keep it, other than cold storage. It’s encrypted and backed up in a tried and true vault. The company has an excellent and longstanding reputation in the privacy industry.