Question about protecting Electreum wallet data file

[bitmover]

I would argue that none of this works at all if your computer is hacked. In that case, all of your wallets will be broken into, unless they are hardware wallets.

Why if the wallet file is stored on an external SSD or flash drive? I mean, if the wallet file is stored on a medium that is not connected to the computer, how will the hacker be able to access it even if he hacks the computer?

The problem is that you will need to sign transactions in that "offline device".
Then you need to insert a pen drive or something like that to transfer the signed transaction to an online computer.

At this point you have a potential breach in your setup which a small mistake can be fatal.

You won't see people saying that they were hacked using a hardware wallet properly.  But using offline computer it is very common

[Husna QA]

I would argue that none of this works at all if your computer is hacked. In that case, all of your wallets will be broken into, unless they are hardware wallets.

Why if the wallet file is stored on an external SSD or flash drive? I mean, if the wallet file is stored on a medium that is not connected to the computer, how will the hacker be able to access it even if he hacks the computer?

In this case, storing wallet files separately from the Electrum app is only an initial precaution in case of a PC hack so that wallet files are not directly affected.
Of course, when making transactions and connecting the drive where the wallet files are stored to your PC, you should ensure that the PC is not hacked and is free from viruses.

Hardware wallets can minimize the incident even if they are connected to a PC affected by malware that the user is unaware of. The hardware wallet will have a confirmation process during the transaction, so hackers will not pass this stage easily.

Another example is that you can cancel the transaction if it turns out that the destination address is different from the desired one, for instance, because the PC is affected by clipboard malware.

Or, even if you don't use a hardware wallet, You can use the multi-signature wallet type in the Electrum.

[Findingnemo]

I would argue that none of this works at all if your computer is hacked. In that case, all of your wallets will be broken into, unless they are hardware wallets.

Why if the wallet file is stored on an external SSD or flash drive? I mean, if the wallet file is stored on a medium that is not connected to the computer, how will the hacker be able to access it even if he hacks the computer?

In this case, storing wallet files separately from the Electrum app is only an initial precaution in case of a PC hack so that wallet files are not directly affected.
Of course, when making transactions and connecting the drive where the wallet files are stored to your PC, you should ensure that the PC is not hacked and is free from viruses.

Keeping the wallet file in a separate drive may give better security but whenever we need to access the wallet we have to connect the wallet file which can potentially compromise the wallet file if the device is affected by a malware.

It is better to prefer an airgapped wallet using electrum or installing tails on memory stick just to access the electrum can be better option.

[Husna QA]

-snip-

Keeping the wallet file in a separate drive may give better security but whenever we need to access the wallet we have to connect the wallet file which can potentially compromise the wallet file if the device is affected by a malware.

It is better to prefer an airgapped wallet using electrum or installing tails on memory stick just to access the electrum can be better option.

Suppose you look at the discussion on the previous page in this thread. In that case, I have also suggested another option, such as using TailsOS (I have tried Electrum on Tails OS, https://www.altcoinstalks.com/index.php?topic=318368.msg1510362#msg1510362), a multi-signature wallet, to save wallet files in different places.

The last option is still too vulnerable, and you must always ensure that the PC you are using is truly safe, even though this should be the security standard for each user when he uses it to install wallet software.