If I want to create a Monero wallet in the most secure manner possible, what are the best practices in doing so?
Are there any written user guides or video demonstrations of this process?
Ok, here is another version. It's not perfect or detailed and it will probably need some additional research.
monero-wallet-cli. Put that on a stick, too. (Check the PGP signature, so you know what you downloaded is correct.)
Creating the Wallet:
monero-wallet-clito your old computer. If you run a live OS, the locations you have to copy the executable to might differ (Google is your friend). Also how to mount the USB stick might need some research.
monero-wallet-cli. It will create you a fresh wallet. If you intend to save it digitally too (as a
.keysfile), give it a proper password when asked.
Voilà, you have created your complete secure cold wallet. But wait, it's not done yet.
Data to save:
Now these steps are very important. You have different data to save now. Since most of the data is not allowed to ever touch a computer connected to the Internet again, I would use at least two different USB sticks here.
Check your address in
monero-wallet-cli (use command
address). This is your public address and it is allowed to touch the internet. Copy it to a textfile on USB 1.
Now check your seed with command
seed. You should save it as a text file on USB 2, but also have to note it down by hand several times. This is all you need to restore your account after all. Make sure the words are correct and that the number/sequence is right, too.
In the folder where you ran
monero-wallet-cli, three files got created. Copy the
.keys file to USB 2.
Optionally, you can also save your view key (maybe put it on another USB, so you can decide later how and when it touches another computer)
It is also wise to note down the seed together with the
monero-wallet-cli version. You can check it with
The process is now basically finished. Of course there is lots of variance. You can go with a paper wallet only, by just not doing USB 2 and just keeping the handwritten seed as the only backup. USB 2 should only touch offline computers. Turn off your computer, wipe it again if it was not a live OS, and keep your seed and USB 2 safe.
Please do practice the creating and restoring process before sending any meaningful amount to such a cold wallet
In essence, the most secure method would be to create a live bootable OS on a USB stick, access it on a machine that is not connected to the internet, and then generate your mnemonic seed and address using a GPG-verified program.
But for an actual, detailed response, instead of copy/pasting someone else's guide entirely, I'll refer you to the extensive guide from one of our more fantastic community members, dEBRUYNE: