Secure BIP 39 seed generation

[ovcijisir]

I'd like to discuss safest ways to generate BIP 39 seed words for BTC wallet.

My first self- generated BTC legacy wallet was generated trough bitaddress on probably not safest way. I just disconnected computer from internet and generated private address trough webpage. This was years ago, so there are much safer ways now.

The safest way I know now is to generate seed from Tails OS that is run on the USB stick, so it has no contact to hard drive. Tails has Electrum wallet by default, so you don't need to connect your computer to Internet. The problem is that as far as I know Electrum seed is not BIP 39 compatible and I'd like to have BIP 39 compatible wallet to have more flexibility of wallet reconstruction - to have possiblity to regenerate wallet on more than one software.

Has anyone any suggestions or other methods for secure seed word creation?

[Charles-Tim]

The safest way I know now is to generate seed from Tails OS that is run on the USB stick, so it has no contact to hard drive. Tails has Electrum wallet by default, so you don't need to connect your computer to Internet.

As long as the device stays offline, the OS does not matter. Just do not go online but use it as a permanent cold wallet.

Although, I recommend Tails and Linux.

You can generate the seed phrase on wallet like Sparrow. It is a BIP39 wallet.

[digaran]

Personally I rather not to use a seed because it is a single point of failure if it's compromised. The safest way is to have individually generated private keys for each address and then writing them on a paper in decimal.
But we all are lazy and like to use seed words to generate wallets because it's more convenient. Whatever you do please don't generate wallets by yourself, use the most trusted open source wallets. 

I would like to provide a link for more reading and please only use open source wallets.
https ://www.blockplate.com/blogs/blockplate/list-of-bip39-wallets-mnemonic-seed

[0t3p0t]

The safest way I know now is to generate seed from Tails OS that is run on the USB stick, so it has no contact to hard drive. Tails has Electrum wallet by default, so you don't need to connect your computer to Internet.

As long as the device stays offline, the OS does not matter. Just do not go online but use it as a permanent cold wallet.

Although, I recommend Tails and Linux.

You can generate the seed phrase on wallet like Sparrow. It is a BIP39 wallet.

Does that work on mobile phone? If not what do you recommend for mobile phones? I have no access to a computer and I can only use mobile phonewith Bitcoin related activities. I am wondering if it is still safe since my phone is always connected to the internet?

[Findingnemo]

Does that work on mobile phone? If not what do you recommend for mobile phones? I have no access to a computer and I can only use mobile phonewith Bitcoin related activities. I am wondering if it is still safe since my phone is always connected to the internet?

Blue wallet generates Bip 39 compatible seeds which available for both IOS and android, but you can never be sure that seeds generated in a device which will be connected with internet is safer especially mobile that is more vulnerable to malware in these days. If you got a device which could be old but should not be connected to internet at all as long as you expect the wallet should not be vulnerable.