best automated ways depend on the skill level of the user so it's not easy or brief to explain
a simple principe take I posted below...
Login to reply
Replies (2)
thanks this confirms what Iโve been working on in the background. ๐ซก
I generally trust '/dev/random' on modern, maintained Linux running on a 64-bit PC. no VMs. fully wiped, air gapped PC...
the choice is personal
coin flips, dice, etc. are laborious setups. there are good, more practical, and confidently secure ways of automating random entropy generation using a modern computer including most mobile phone devices
the problem is those devices are designed to be hot connected to networks. hence introducing many attack vectors
one of my favorite multisig setups are start with old 64-bit PCs well wiped (storage, BIOS, CMOS) and never network connected. load a modern, maintained 64-bit Linux to generate keys and seeds
generate keys and seeds with Linux and a trusted software wallet like Sparrow, Bitcoin Core, etc (verifying each software install package!)
hand write it all and transfer one key to a hardware wallet like Trezor and others. Once hardware wallet recpvery is tested, secure or destroy paper, and wipe PC device fully (shred Linux block devices, reset PC CMOS)
repeat with diverse PCs, Linux kernels and OSes, wallet softwares, hardware wallets
View quoted note →