Here's what I did:
Used the seed words in sparrow.
Created new wallets in sparrow.
Transferred all funds
Updated my Mk4 firmware.
Wiped it.
Generated new seeds with dice (that's as far as I'll disclose here publicly)
Imported to Mk4 as an airgapped signing device.
Moved coins back under it's signing authority... But, really, with the seedphrase it's all redundant so that's where the real security has always had to be placed.
The risk was the old RNG for device created seeds. I was guilty of originally using that DESPITE all advisory not to (including by Coinkite on their website). Self custody isn't easy. It shouldn't be easy. When you elect to take personal responsibility every outsourced security detail is a weakness in the system (I don't care if it's a SentrySafe, shlage lock, nest cam, ring doorbell, not getting your wheels retorqued after seasonal change, etc).
Those who give up security for convenience deserve neither. Looking at you Keystone (with no seedphrase? WTF!?). I haven't played with too many other wallets but to watch reviews and there are few I'd consider a valid replacement feature wise.
Willheim
npub1th…4zcux
2026-08-04 21:07:31 UTC
in reply to nevent1q…jwec
Author Public Key
npub1thljewtf8rgskx8y2w5lgddtydzu7nqx6mvhwp96du8sf6s8a43qr4zcuxSeen on
wss://wot.utxo.onePublished at
2026-08-04 21:07:31 UTCEvent JSON
{
"id": "5ea6d51712ddc7084ff2427c5c9617e83716512bf1a5b44602ea896306608b42",
"pubkey": "5dff2cb96938d10b18e453a9f435ab2345cf4c06d6d97704ba6f0f04ea07ed62",
"created_at": 1785877651,
"kind": 1,
"tags": [
[
"e",
"f74df5034541f47a5daef079e373b80cf91343be0ac0b34c8f3c5df34e6e8fa6",
"wss://relay.primal.net/",
"root",
"5dff2cb96938d10b18e453a9f435ab2345cf4c06d6d97704ba6f0f04ea07ed62"
],
[
"e",
"0841b4969877ddb063a9c5bc466fd065353e86189b170093391da89189f65d60",
"wss://relay.primal.net/",
"reply",
"2c65940725bbf10bfbbf52b76c41606754441264f707d3d9cc1ceab86d73fd7f"
],
[
"p",
"5dff2cb96938d10b18e453a9f435ab2345cf4c06d6d97704ba6f0f04ea07ed62",
"wss://relay.damus.io/"
],
[
"p",
"2c65940725bbf10bfbbf52b76c41606754441264f707d3d9cc1ceab86d73fd7f",
"wss://nostr.land/"
],
[
"client",
"Amethyst"
]
],
"content": "Here's what I did:\nUsed the seed words in sparrow.\nCreated new wallets in sparrow.\nTransferred all funds \nUpdated my Mk4 firmware.\nWiped it.\nGenerated new seeds with dice (that's as far as I'll disclose here publicly)\nImported to Mk4 as an airgapped signing device.\nMoved coins back under it's signing authority... But, really, with the seedphrase it's all redundant so that's where the real security has always had to be placed.\n\nThe risk was the old RNG for device created seeds. I was guilty of originally using that DESPITE all advisory not to (including by Coinkite on their website). Self custody isn't easy. It shouldn't be easy. When you elect to take personal responsibility every outsourced security detail is a weakness in the system (I don't care if it's a SentrySafe, shlage lock, nest cam, ring doorbell, not getting your wheels retorqued after seasonal change, etc). \n\nThose who give up security for convenience deserve neither. Looking at you Keystone (with no seedphrase? WTF!?). I haven't played with too many other wallets but to watch reviews and there are few I'd consider a valid replacement feature wise.",
"sig": "dbbf46302ff394037efc2db06f2715c5bcc67e8bb37a403e350602f08797081793069b8e1c584b3580697533323047f489c60be1a510df1d13fb9bc57cb24ebe"
}