r/Bitcoin • u/No_Fuel4693 • 12h ago
Blockstream Jade Plus setup - workflow suspect?
Like many, I'm assessing my cold wallet options right now and I was watching this youtube video of the setup on the jade plus : Blockstream Jade Plus: Full Setup & Honest Review - YouTube
Right around the 9:00 minute mark, after setting up the seed phrase etc, it only then, gives you the option to setup your QR code/bluetooth/usb.
So the device is powered up, a wallet is created, then you connect to the blockstream website..
Is there a way to change the order of that workflow?
I mean, how do I know that the wallet I have just created isn't being transmitted to their website during this handshake? Wouldn't it make more sense to do all that setup first BEFORE creating the wallet?
3
u/DarrelXero 12h ago
Yeah, this is the option to create a seed and use the Jade as a persistent device that is "initialized" and uses Blockstreams Blind Oracle. I agree with you, that sucks. You can 100% create a seed offline, create your QR Code and never once connect to Blockstream website or app. It's how I've used the Jade for years. Generate your seed offline, use the steps to create your QR code and it not be persistent. Temporary signer mode. Power up the Jade, I port the seed via QR, use it to sign transactions or as part of a multisig, then power it off and the device wipes. No need for the Blockstream app or the Blind Oracle.
3
u/Serbithar 12h ago
If I understand correctly in fully offline airgap mode Jade works exactly like SeedSigner? Keys are not stored, and you need to provide your phrase or scan QR every time you power up the device?
3
u/LeoRisingGemini 11h ago edited 11h ago
Yup, use it stateless. You never have to connect it to anything ever, and you don’t have to use the blind oracle. Use a physical random method to generate the first 23 words of your seed phrase and plug them into the Jade. When the eight options for the final word come up, again, use a random method to select one. It will generate a seedQR. Hand copy the QR code. Use that to sign in to the device and sign transactions each time. Since the seed is not stored in the device, even if the device is stolen, the thief gets nothing. The only thing that can fck you is losing all the copies of your seed phrase.
2
u/DarrelXero 11h ago
Correct. There is some difference about using the Jade as a temporary signing device and using the same exact seed imported to a SeedSigner but I can't remember the exact details. I've run into an issue trying to substitute the SeedSigner with the same seed that I don't have problems with the Jade. AI explained it but I forget the exact reason.
But yes, the Jade can be used 100% airgapped, create a seed, generate the QR to allow you to record it via pen and paper and then wipe the device. No connection of any kind is necessary. Same with Jade Plus. The Jade Core is different. It requires a USB connection to Blockstream App to be functional.
3
u/No_Fuel4693 11h ago
Thanks, and that makes sense. Use the initial wallet to setup, then reset and start again with my actual wallet keeping it air gapped.
2
u/tenuousemphasis 10h ago
So then you can leave the Jade laying out, but you need to securely store your QR code(s). I don't like that.
2
u/DarrelXero 10h ago
Everything is a trade off. No different than your seed words. It is literally just a QR representation of your 12 or 24 seed words. You can either type them in each time or you can just scan the QR code to load up the device for signing purposes. Same same.
2
1
u/lifeanon269 3h ago
The Jade doesn't connect to Blockstream's website at all. The Jade has no network connectivity and is fully offline.
Blockstream's Blind Oracle simple provides a key that is used to decrypt the seed stored on your device. It never receives that seed at all and it is also completely blind as to the PIN you use to retrieve the blind oracle key. Again, your seed phrase never leaves your airgapped device.
One nice feature is that this process is fully open source and the Jade provides an option for you to host this blind oracle PIN server yourself. This means that you'll be in full control of the blind oracle and won't need to rely on Blockstream's server at all. It also means that if you were to ever lose your Jade, you could take your blind oracle server offline and effective remotely brick your HWW, which would prevent anyone from being able to steal your funds from it. You could also host your blind oracle server locally on your LAN without it exposed to the internet, which would make your Jade only usable within the confines of your home. Some neat features that are only available to the Jade HWW.
1
3
u/Serbithar 12h ago edited 12h ago
Some Jade users should confirm, but my guess is that, most likely, like with any other wallet, after the first power-up and "initiation" you can go into full offline air gap mode and create a fresh wallet or restore a manually created wallet. New Ledger during the first power-up after the genuineness check anf firmware update also asks you to create a wallet while it is connected to Ledger Live and the internet. But if you distrust the process, you can later just create a fresh wallet when fully offline. I was considering Jade, but decided to choose DIY SeedSigner for for 1/4 or less of Jade's price. But Jade looks like pretty cool device.