Can google steal my Bitcoins if I store the private key in Google Keep note

2

1

A while ago I put all my addresses with private keys (although they did not have that much money in them) onto a google keep note. I put it on a password protected notepad on my phone now, but could anyone have stolen them from my google keep note?

Riley Potts

Posted 2015-12-05T00:35:19.230

Reputation: 125

Answers

4

It'd be a huge violation of user trust if a Google employee looked at customer data and did something like that, so I'd say extremely unlikely.

That said, you shouldn't ever put your private keys on the internet.

Lastly, if this did happen and it involved any substantial amount of money, Google would be able to determine which employee accessed your data, which you could then very likely use in civil court to recover your stolen BTC.

Disclaimer: I work at Google.

JJ Geewax

Posted 2015-12-05T00:35:19.230

Reputation: 345

So there can't be a middle man in between me and the server where the note was stored? Also how long does it take from when the time the clicked delete on that note and when it is actually deleted for real?Riley Potts 2015-12-05T02:10:25.470

1There cannot be middleman, because all Google connections are HTTPS encrypted nowadays. If you want to be sure you can always move coins to a different address, though. That is more safe than deleting the note, as you have 100% control over the operation.Mikko Ohtamaa 2015-12-05T03:45:48.800

1The same argument goes for storing your money at a bank.Pieter Wuille 2015-12-05T04:50:40.657

I agree with @MikkoOhtamaa about the man-in-the-middle attack. SSL should solve that problem for you.

Google also (now) encrypts even more due to that whole Prism thing: https://www.eff.org/deeplinks/2013/10/prism-is-not-enough

JJ Geewax 2015-12-06T16:22:54.947

@RileyPotts: I don't think it's safe to say "how long it takes" for something to be fully deleted, as that's actually a really complicated question.

The general gist here is: it's a bad idea to put your private key anywhere on the internet (Google or not). If you did this already, just move your coins to a new address, and the problem goes away. If you want a safe back-up, consider a BIP38 encrypted paper wallet in a safety deposit box (https://bitcoinpaperwallet.com/bip38-password-encrypted-wallets/)

JJ Geewax 2015-12-06T16:23:28.820

0

It is possible that someone at Google may use that information to steal your bitcoins, but it is extremely unlikely.

gw90

Posted 2015-12-05T00:35:19.230

Reputation: 65