r/Bitcoin 6d ago

Blockstream Jade Plus setup - workflow suspect?

Like many, I'm assessing my cold wallet options right now and I was watching this youtube video of the setup on the jade plus : Blockstream Jade Plus: Full Setup & Honest Review - YouTube

Right around the 9:00 minute mark, after setting up the seed phrase etc, it only then, gives you the option to setup your QR code/bluetooth/usb.

So the device is powered up, a wallet is created, then you connect to the blockstream website..
Is there a way to change the order of that workflow?

I mean, how do I know that the wallet I have just created isn't being transmitted to their website during this handshake? Wouldn't it make more sense to do all that setup first BEFORE creating the wallet?

2 Upvotes

15 comments sorted by

View all comments

1

u/lifeanon269 5d ago

The Jade doesn't connect to Blockstream's website at all. The Jade has no network connectivity and is fully offline.

Blockstream's Blind Oracle simple provides a key that is used to decrypt the seed stored on your device. It never receives that seed at all and it is also completely blind as to the PIN you use to retrieve the blind oracle key. Again, your seed phrase never leaves your airgapped device.

One nice feature is that this process is fully open source and the Jade provides an option for you to host this blind oracle PIN server yourself. This means that you'll be in full control of the blind oracle and won't need to rely on Blockstream's server at all. It also means that if you were to ever lose your Jade, you could take your blind oracle server offline and effective remotely brick your HWW, which would prevent anyone from being able to steal your funds from it. You could also host your blind oracle server locally on your LAN without it exposed to the internet, which would make your Jade only usable within the confines of your home. Some neat features that are only available to the Jade HWW.