When your financial assets are digital and frequently stored online with other entities being hacked is a concern. Learn some common sense items and practical tips you can implement to manage your assets in a secure manner.
Metamask software wallet: https://metamask.io
Forbes article on hardware wallets for cryptocurrency: https://www.forbes.com/sites/forbes-personal-shopper/2021/07/19/best-crypto-wallet/
Hey everyone, no one on this podcast is a financial advisor and all information presented on this podcast is for informational purposes only
Speaker:And now that we have the legal stuff out of the way, let's jump on in
Speaker:Welcome to the generational wealth with cryptocurrency podcast. I'm your host McIntosh and today we're going to be talking about hacks now
Speaker:We're gonna jump on in this is going to be a fairly short session. I believe
Speaker:But we do need to discuss it. We're dealing with your
Speaker:You know, we're dealing with money. We're dealing with your finances potentially. We're dealing with a lot of money
Speaker:so we want to be careful with that a
Speaker:lot of a
Speaker:Lot of this honestly revolves around common sense
Speaker:so I
Speaker:know
Speaker:You know when we first got when we first got cell phones that you didn't have people randomly texting you with some
Speaker:scam trying to get you to click on a
Speaker:on a link so that you could win a prize or
Speaker:Or whatever and
Speaker:Yet now these are quite common I get messages all the time
Speaker:Things like oh
Speaker:Oh, let's see. Do do do do do I
Speaker:Have I have one in a couple of days apparently
Speaker:But bump a bum
Speaker:Well, here's one where it's just a link
Speaker:Why would I click on that and it was sent to a whole bunch of people from somebody that I didn't know?
Speaker:There's no telling where that's gonna go
Speaker:So there's things click here to confirm your
Speaker:$500 gift card from Walmart, you know junk like that stuff that
Speaker:Doesn't really make a whole lot of sense if you stop and think about it for just a second
Speaker:But we've learned to deal with that right? That's just part of the reality of having a cell phone
Speaker:Same thing with crypto. You're going to get a lot of
Speaker:messages
Speaker:Online if you're on say a discord group about cryptocurrency
Speaker:You will have people who will direct message you saying hey
Speaker:Blah blah blah. Here's this thing, you know, send me money. Well, however, they word it and
Speaker:99 times out of a hundred
Speaker:It's scam and so you need to be very careful when you're dealing with stuff like that
Speaker:We've talked in the past about wallets wallets. We used to store our currency in our crypto in
Speaker:Do not so with any wallet as I've said, you've got a private key
Speaker:You've got a public key do not ever ever ever ever ever ever
Speaker:Give people your private key
Speaker:when you give them the private key you give them control and they will clean you out just like that so
Speaker:Don't ever do that
Speaker:If you have more than a minimal amount of crypto and that's up to you as to what that means
Speaker:You might want to split that up and keep it in multiple places
Speaker:Especially especially if you're using these centralized exchanges
Speaker:like Coinbase or Kraken or I don't know by Nance or one of these other exchanges because
Speaker:Hacks do happen on a centralized exchange
Speaker:And they do things to help mitigate that and actually I'll mention that again in a minute as to one of those ways that
Speaker:They do that, but they do happen infamously Mount Gox, which I've mentioned before
Speaker:Ironically, I was actually looking through I was
Speaker:Going through something and I told y'all that I actually lost some money on Mount Gox and I thought I'd gotten it back
Speaker:Or at least most of it or whatever
Speaker:But it happened back in 2014 and I don't really room and it was fairly soon after I gotten involved in crypto
Speaker:And I don't really remember the details
Speaker:But I was going through my email
Speaker:And I did find I had a login on Mount Gox
Speaker:Back in 2014 and I did find um on Kraken actually where they were pointing people to a claim site for something
Speaker:Some type of settlement. This is like the final sell settlement of the creditors
Speaker:And as a person who had crypto on that exchange, I would be a creditor
Speaker:Hopefully will get us
Speaker:Either money or more money. I don't even know at this point. It doesn't matter
Speaker:I'm going to go through the process. I didn't have a whole lot on there
Speaker:That I well I didn't have a whole lot on there in terms of money
Speaker:But the interesting things is that if you look back at bitcoin price in 2014, it was only like five hundred dollars
Speaker:So even if I had a couple hundred dollars on there
Speaker:It would have been like half of bitcoin and so it's worth
Speaker:Going through the process
Speaker:to try and figure out
Speaker:this
Speaker:System that's in japanese
Speaker:Converted, you know with translations into english and hopefully I can navigate this because
Speaker:If I can recover 90 percent of what I had on there
Speaker:Potentially, it could be a lot of money. I don't know. I'll I'll let you all know maybe at some point
Speaker:I doubt it's going to turn into anything, but I've got to thinking about that because of the prices
Speaker:You know in 2014 versus now, it's worth me pursuing certainly
Speaker:So we'll see anyways, that's an example certainly the most
Speaker:Widespread example of a hack of a crypto uh central exchange
Speaker:Uh, there's been others
Speaker:And so it's just prudent. You know, maybe maybe you're not comfortable keeping more than a thousand dollars on a on a central exchange
Speaker:I don't know
Speaker:I think you'll find as you're as your account grows
Speaker:You're not going to divide up 10 different crypto exchanges, you know to keep
Speaker:Ten thousand dollars, but you do what?
Speaker:What you're comfortable with
Speaker:And it's a simple thing to do. You know, you transfer money transfer your coin from one one account to another
Speaker:No big deal
Speaker:That's one way of minimizing your risk on a central
Speaker:On a centralized exchange. I would also recommend if you're using a centralized exchange
Speaker:And virtually all of you will be to at least at least to an extent if only to trade
Speaker:I would also recommend in your settings that you're going to use what's called two-factor authentication
Speaker:So you may get a text
Speaker:When you log in that it gives you some code numbers. You've probably seen this with maybe a bank account
Speaker:2fa two-factor authentication
Speaker:But you know, you're you're going to plug in those numbers to after you plug in your password
Speaker:So you're providing two forms of authentication
Speaker:Or you're going to use an app that generates numbers that you would plug in something like that
Speaker:That's called two-factor authentication
Speaker:You definitely want to use that that way if your password were to be compromised. They would also have to have your authentication
Speaker:Method in order to log in
Speaker:Which makes it very unlikely
Speaker:Another thing that you should do is enable
Speaker:the options so that when you
Speaker:log in when you
Speaker:Send money or when you deposit money you get an email you're getting visibility into
Speaker:Into your account activity
Speaker:So that may be a way that potentially could keep you from losing money there
Speaker:So I would definitely recommend all of that
Speaker:This is kind of going back to the common sense stuff. You also need to keep hard copies of your passwords
Speaker:And your recovery words, which we'll talk about in just a minute for your software wallets
Speaker:Stored in a safe or another secure location. I personally don't trust myself to remember
Speaker:My if if i'm not logging in frequently to a system, i'm not going to remember a password
Speaker:So if I maybe I throw some money in there and then five years later
Speaker:I come back to it, but I can't remember my password and i'm locked out of my account and that would be bad
Speaker:Especially if you're not using a centralized exchange if you're using a centralized exchange
Speaker:They usually have a process to reset your password and you have to prove yourself, but you can do it
Speaker:But if you are running your own wallet
Speaker:A software wallet and you lose the password then you lose the money
Speaker:This isn't really security, but I did want to throw this in
Speaker:And this is something that people can maybe they don't like talking about this, but I think this is important
Speaker:You need to have a plan in case you become incapacitated
Speaker:Or in case that you die
Speaker:You know if you're married
Speaker:You're safe and secure
Speaker:You know if you're married your spouse needs to have
Speaker:Access they they need to have a list of the accounts basically they need to have access
Speaker:Otherwise
Speaker:If you were to die
Speaker:Unexpectedly they won't have any way of getting access to that and and that would be a shame
Speaker:They really it's so that's just something that you need to think about
Speaker:now
Speaker:I want to talk about the three main ways that you can store your crypto
Speaker:The first way of course is a centralized exchange. We've been talking about this already
Speaker:You know, these are companies that you log into like coinbase or kraken they store your money
Speaker:Technically there's no private key that you own
Speaker:And that really means you don't actually own the money and i've talked about that
Speaker:But most people are okay with that. It's like a bank
Speaker:You are depending on them to secure your
Speaker:Crypto and they can do that in a variety of ways. You may want to look into
Speaker:How your central exchange stores it the majority of their crypto
Speaker:They should be keeping in something called cold storage and we're going to talk about that more in just a second
Speaker:But it's a very secure way
Speaker:Of keeping crypto
Speaker:They have to keep some on hand for people to move around to trade with this kind of thing
Speaker:but
Speaker:I don't know 90 percent of their crypto should actually be kept in cold storage. It should be kept offline because
Speaker:That is what keeps
Speaker:If the system were to be compromised, it would be what would keep the hackers out of the vast majority of that crypto
Speaker:So if coinbase were to be hacked
Speaker:Uh, and I do believe coinbase does keep the majority of their coin in cold storage
Speaker:Maybe they get five percent of their total crypto. It'd probably be less
Speaker:but let's just say that coinbase being as large a company as they are with the amount of
Speaker:Coin that they're dealing with with the profits that they have
Speaker:They could manage that
Speaker:They should be able to turn around to any customer who's affected by that
Speaker:If if this hack was caused
Speaker:By their negligence and pay for it and it not shut down the exchange
Speaker:so
Speaker:That's the best way to keep
Speaker:A coin on a central exchange if it's a an exchange that's built a system like this now
Speaker:I already mentioned cold storage. There's two types of storage where you're holding it yourself
Speaker:There's what's called a hot wallet and there's what's called a cold wallet
Speaker:A hot wallet is a digital wallet. That's on the internet. It's on your computer
Speaker:It's on your smartphone a very common example of one would be called metamask. I believe
Speaker:And I haven't looked up this figure but just anecdotally. I believe it's it's probably the most common software wallet
Speaker:That's out there now somebody may be able to send me a figure saying that it's not but it's certainly a very common one
Speaker:Metamask.io
Speaker:Is the website?
Speaker:I'll have that in the show notes as well, but it is open source. It's got a long track record
Speaker:And it's a high quality product. I actually use it. I actually use it
Speaker:but with a hot wallet, you've got your private keys and your
Speaker:public keys
Speaker:for your coin
Speaker:online
Speaker:so if there's a
Speaker:A flaw that can be exploited in your system
Speaker:a
Speaker:Hacker could potentially take control of that wallet
Speaker:and drain your coin
Speaker:so it's not
Speaker:It's not a panacea. It's not perfect. I would say
Speaker:Probably and this is not advice, but for me personally, I would say that it's better
Speaker:To keep it in a hot wallet rather than on a crypto exchange. Now. I use centralized exchanges
Speaker:centralized exchanges
Speaker:From time to time to trade coin. I tend to not keep my coin on that exchange though
Speaker:I just don't trust them. I've seen too much. I guess. I don't know. I'm too old. I don't know whatever
Speaker:But I just don't keep my coin there, but I do utilize them. I'm not
Speaker:I'm not to the point where I like I only use decentralized exchanges
Speaker:all right, so
Speaker:hot wallet
Speaker:Metamask there's a a number of others
Speaker:a cold wallet cold storage
Speaker:Really?
Speaker:It's probably a better word for it and I already mentioned cold storage talking about
Speaker:Centralized exchanges cold storage is some type of storage that's not connected to the internet
Speaker:Cannot have an internet connection if it does then it's not cold storage
Speaker:How do you do that? Well
Speaker:You can do that in a variety of ways
Speaker:One of the best ways and if you have a significant amount of crypto
Speaker:This is probably something you ought to think about is a hardware wallet
Speaker:So this is basically like a usb drive most of you
Speaker:If not, everybody's probably familiar with like a usb thumb drive
Speaker:And you plug it into your computer
Speaker:Which your computer should not be connected
Speaker:when you do this, but you
Speaker:You can
Speaker:Load your coin up disconnect it put it in a safe put it in your pocket
Speaker:Actually, you could carry it around with you. You could have millions of dollars
Speaker:in your pocket
Speaker:And that may sound crazy
Speaker:And if I had millions of dollars on one, I probably would not carry it around with me, but it is certainly possible
Speaker:One of the immediate questions that popped to my head when thinking about this is well
Speaker:What happens if it breaks what happens if?
Speaker:Uh, it gets smashed accidentally for whatever reason
Speaker:So you can actually recover
Speaker:What's in there?
Speaker:Through what is called a seed phrase
Speaker:now
Speaker:This is not your private key
Speaker:And there are differences
Speaker:But you can use a seed phrase to recover a wallet
Speaker:Actually, you can use the seed phrase to recover a metamask wallet
Speaker:I've actually done that
Speaker:But you can do the same thing with a hot wallet
Speaker:So you can set up a new wallet and basically you can transfer over to it
Speaker:Now that is pretty cool. So I have a hardware wallet
Speaker:Maybe i'm in a car crash and it gets smashed up because I keep it in my
Speaker:Pocket because I that's just how I roll
Speaker:And
Speaker:No, no now what will I order another and I put in my seed phrase and I recover it
Speaker:And I go on my merry way now if i'm carrying it around and somebody says hey, give me that
Speaker:And they're a mugger
Speaker:What am I going to do? I'm going to give them that
Speaker:Because they don't have the private key. They can't get into it
Speaker:And they don't have the seed phrase so they can't recover it
Speaker:So it's it's a it's a very secure system. It's not, you know, there's no system. That's unhackable
Speaker:But it's very secure
Speaker:That's not the only type of cold storage
Speaker:Interestingly, well, you can use a software wallet in the same way
Speaker:On an offline computer now to be cold storage. You have to be offline
Speaker:But you could use software on your computer to actually manage that
Speaker:You can use paper
Speaker:Understand bitcoin. It's just a series of characters and you can actually write it out
Speaker:I don't really recommend it. It's not very
Speaker:durable
Speaker:Uh, people could see it and especially these days when everybody's got a camera in their
Speaker:In their back pocket, you could snap a picture of it real quick
Speaker:And reconstitute it later if you knew what you were doing
Speaker:You could even do it as a qr code. So those last couple of methods
Speaker:They're not really very durable, but they do work and they're not online
Speaker:So as long as they're not online, it's cold storage and as long as it's cold storage
Speaker:You can consider it to be highly secure if not highly durable
Speaker:Now if I were doing it on paper for some reason, I would have that locked up in a fireproof safe
Speaker:Right now my thumb drive. I may choose to do the same thing with a software wallet
Speaker:obviously, I can't put that in a safe and even though a software wallet may be
Speaker:Free versus a hardware wallet, which they run between like 50 and 150 bucks
Speaker:It's more difficult to work with a software wallet and I don't know. There's just to me the hardware wallet
Speaker:Once you're serious about this, if I know that for the next 10 years, I'm going to be buying crypto
Speaker:Cryptocurrency, I'm going to be stacking sats as the bitcoiners say or
Speaker:You know, I'm going to be dollar cost averaging for the next 10 years and I know over that period of time. I've got a
Speaker:An opportunity to to make a large amount of money
Speaker:Right because I've looked at the last 10 years and I've realized that
Speaker:I've realized that the adoption of crypto is just taking off and the next 10 years
Speaker:Are going to make the last 10 years look like child's play that even if I were to lose one little
Speaker:Piece of a coin it could potentially be a lot of money. Even if it's not a bitcoin, which now they're you know, 45,000
Speaker:47,000 whatever it is
Speaker:Because we don't know what it's going to be 10 years from now
Speaker:10 years from now, my estimation is is it's going to be a lot more than it is right now
Speaker:So if I were to even lose part of an eath right now, I would not be happy because i'm looking at the 10 years down the road
Speaker:So to me spending the 150 bucks
Speaker:The hundred hundred and fifty dollars or fifty dollars on my hardware wallet
Speaker:It's an investment. It's not an expense
Speaker:Hardware wallet. It's an investment. It's not an expense
Speaker:That's probably the safest way that you can keep your crypto in the long term
Speaker:It's not as easy to move it on and off but
Speaker:It's definitely more secure and it's definitely something you should think about
Speaker:Certainly in the long run if you're not if you're just getting started then, you know, maybe you don't want to spend
Speaker:Even fifty dollars to do that. That's okay
Speaker:Uh, just get going do something don't stand there
Speaker:And do nothing
Speaker:Uh, i'm going to include an article that was in forbes actually back in july of this year
Speaker:About the best crypto wallets. I looked through it. It looked fairly reasonable
Speaker:The top brands that they're recommending are certainly the most common
Speaker:Top brands out there. It's not like they just
Speaker:You know pulled something out of thin air. So i'm going to include that in the show notes
Speaker:If you have any interest in that, I certainly get no
Speaker:Compensation from that not looking to make any money off of that. It's not the deal
Speaker:Not at all
Speaker:I just want you guys to be safe. I want you to be secure
Speaker:I want you to not be up at night worried about your coin. Oh my i've got thirty thousand dollars
Speaker:On this exchange and what would happen if you know, the exchange came apart. I don't know
Speaker:Six years later, maybe you'll get money back possibly right like what I was talking about with mount cox
Speaker:And the funny thing is they expect us to remember our password
Speaker:so
Speaker:Anyways, that's kind of my brief introduction
Speaker:Looking at probably 15 or 20 minutes talking about hacking
Speaker:Uh certainly would get you off to a good start give you an idea of
Speaker:You know, where are you at?
Speaker:And where you need to be. I didn't actually talk about password security
Speaker:I've been in the computer industry for a long time. This almost falls under common sense, but
Speaker:You know don't use password for your password. Let's not be stupid come up with good passwords
Speaker:Preferably a completely randomly generated one. Do not use the same password
Speaker:on different sites
Speaker:Beyond the scope of what we're really talking about. But if you can't keep up with your passwords get a password manager
Speaker:I actually use um
Speaker:I've used two for a long time. I use data vault. I just recently switched to key pass
Speaker:Which is an open source password manager works really well across a wide variety of
Speaker:A wide variety of computers guys. That's going to wrap it up for the week. There's no real news this week
Speaker:I don't really have any news items to cover not aware of any countries that adopted bitcoin this week
Speaker:I wouldn't be surprised if one stuck past me
Speaker:market's actually been kind of
Speaker:Going sideways got a little bit of dip going on over the weekend, but i'm pretty sure that tomorrow
Speaker:Early next week. It's going to pick back up
Speaker:but uh
Speaker:You can always reach me at mccintosh.fintech
Speaker:At gmail.com that's m-c-i-n-t-o-s-h
Speaker:dot f-i-n
Speaker:t-e-c-h
Speaker:at gmail.com
Speaker:Let me know what you're thinking got questions. I'll certainly do my best to answer those