Use this site over Tor

HTTPS keeps what you read on this site private. It does not hide that you read it. Your internet provider, the Wi-Fi owner, and anyone between you and us sees a connection to bitcoinseedbook.com, and a visit to a seed-phrase site tells a story about you that a visit to a recipe site doesn't. Our own server sees the request too. The main site keeps access logs for two days; the vault, where the ciphers live, keeps none.

The same site is served as a Tor onion service. Over Tor, your provider sees Tor traffic and nothing else, the Tor network doesn't know what site you asked for, and we see a connection from the Tor network with no address behind it. The onion site is a proxy to the same files, so every page here, the ciphers included, is there.

The address

http://p5f2dj3bb3w7yna4mh5cbsigi3k5kpu6go5fkv5agexputsvplkyg3qd.onion/

It is also in onion.txt, a statement signed with the same key that signs the cipher tomes, and on the signing key page. The signed statement exists because a look-alike onion address is the easiest way to run a phishing copy of a site like this one. Check the address against the signed file before you trust a link to it, the first time and any time it looks different.

Tor Browser

Install Tor Browser from the Tor Project, nowhere else. Open it and go to https://bitcoinseedbook.com/. The address bar shows a .onion available button: this site sends the Onion-Location header that Tor Browser has recognised since version 9.5, in June 2020. Click it and the same page reloads from the onion service. Tor Browser offers to do that automatically from then on.

Or paste the onion address directly. Either way, once you are on the onion site every link stays on it. The top of each page says "Secure channel" instead of the field notice you see here.

A few habits that make the trip worth taking:

• Don't log in to anything else in the same Tor Browser session. There is nothing to log in to here, which is the point.
• Download the tomes over Tor if you download them at all. The download is big and slow over Tor; the torrents are faster and equally anonymous only if your torrent client is also routed through Tor, which most are not. A slow download over Tor is still the quieter choice.
• Verify what you download. The signature page takes a minute per tome.

Brave's "Private Window with Tor"

Brave can open .onion addresses in a private window that routes through Tor. It reaches our onion site and it hides the visit from your provider. Brave itself says that if your personal safety depends on remaining anonymous, you should use Tor Browser instead: the Brave window routes through Tor, but the browser is still Brave, with Brave's fingerprint and extensions. For reading a cipher table on a laptop at home, Brave's window is a reasonable shortcut. For the border case, use Tor Browser.

What Tor doesn't change

Tor hides who is reading. It doesn't change what you do with the page. The rules from the rest of this site still apply on the onion site, more so, because people assume a hidden site is a safe place to type:

• We will never ask for a seed word or a passphrase. Never type one into this site or any tool it links to, on either address.
• Pick your cipher from a downloaded tome, offline, rather than opening one cipher page on the site. Over Tor we can't see which page you open, but your own browser history can, and a laptop is searched more often than a server.
• The onion site is the same static files behind a proxy. It is not a different, more private version with extra features. If a page on the onion address asks for something the clear site doesn't, you are not on our onion address.

If the onion site is down

It runs on a machine at home, over a residential connection, and it caches pages from the main site. It can be slow, and it can be off. The main site is still there over HTTPS, and a VPN hides the visit from your provider, though not from the VPN company. When the onion site comes back it serves the same pages; nothing is only there.

Sources