Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve Umbrel security for seed phrase storage #53

Open
ffrediani opened this issue Jun 6, 2024 · 0 comments
Open

Improve Umbrel security for seed phrase storage #53

ffrediani opened this issue Jun 6, 2024 · 0 comments

Comments

@ffrediani
Copy link

Currently Umbrel stores the seed phrase in plain-text inside the file /data/umbrel-os/home/umbrel/umbrel/app-data/lightning/data/lightning/state.json which is a concern. Should anyone have physical access to the hardware running the node could just mount the Filesystem and have easier access to the funds on-chain.

Can this be improved by storing the seed phrase in a AES-256 encrypted file which may use Umbrel password to unlock it, so in the case the node is stolen the owner has some time to access the funds and transfer elsewhere from that wallet ? Some Hot Wallets use similar techniques in order to store seed phrases on users computer

For reference one technique used is based on 7-zip encryption which uses AES-256 but that may be others.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant