SeedLock 0.3.0

Changes in 0.3.0:

• SeedLock now works only offline, on the computer and on the phone. On a computer that is connected to a network, it shows only a message naming the connection: disconnect it and press Enter, and the menu opens. On the phone, the first screen shows only a message until airplane mode is on and no network is connected.
• If a connection appears while SeedLock is open, it stops at once (it checks every second): on the computer it clears the screen and the terminal's scrollback, and the QR window closes too; on the phone every screen closes, with any open seed.
• Where SeedLock cannot tell whether the computer is online, it does not work either. There is no option to work online.
• Commands stop with exit code 3 when the computer is not offline; --help and --version still answer.

Check the downloads with SHA256SUMS.txt and its signature SHA256SUMS.txt.asc (README, Part 1). The phone app is signed with SeedLock's Android key, certificate SHA-256 02:27:2A:CC:06:84:2D:36:3A:19:A6:CF:48:3D:D9:28:5F:CB:CA:C5:38:AB:98:24:51:14:35:2A:B9:68:63:44.

SeedLock is not independently audited.

SeedLock 0.2.1

Changes in 0.2.1:

• The phone app is now in the release, ready-made: seedlock-0.2.1-android.apk, for Android 7.0 and newer. It is still a preview: try it with a test wallet (testnet) or a small amount first. How to install it: android/README.md.
• It is signed with SeedLock's own Android key. The SHA-256 fingerprint of its certificate is 02:27:2A:CC:06:84:2D:36:3A:19:A6:CF:48:3D:D9:28:5F:CB:CA:C5:38:AB:98:24:51:14:35:2A:B9:68:63:44.
• If you built the app yourself before 0.2.1: Android does not let the ready-made app replace it, because it is signed with another key. First save a copy of each backup and multisig wallet as a file, then uninstall the old app (the link above says how).
• A password from a password manager on the phone: while the app asks for a backup's password, you can now leave it for up to 5 minutes to copy the password, then come back and paste it. The app empties the clipboard afterwards.
• The app has a new screen, About SeedLock and its licenses, with the license notices of every library it is built from.
• When you build the app yourself with Android Studio, it now installs as SeedLock test, beside the ready-made SeedLock, with backups of its own.
• On the computer: when menus 1 and 2 show a new backup's QR code, they now also save it as a picture next to the backup, as menu 8 does. Menus 1, 2, 5, 8 and 10 save their pictures and files before the QR code is shown, and say where.

As always, check the downloads with SHA256SUMS.txt and its signature SHA256SUMS.txt.asc (README, Part 1).

SeedLock is not independently audited.

SeedLock 0.2.0

New in the computer program:

• A backup's QR code (menu 8) now holds the backup's name, on a second line. When SeedLock reads such a code (type c where it asks for a backup), it uses that name for the files it saves and for Sparrow's keystore, instead of asking. QR codes from older versions still work. The name is not encrypted (like a file name); the backup is.
• Menu 5's QR code for Sparrow is now in Sparrow's own wallet format (UR crypto-output) and names the wallet's keystore after the backup. Import it as before: File > Import Wallet > Output Descriptor > Scan...
• The computer program and the phone app now share the same code for reading QR codes and for finding a transaction's network.

Also new: the source code of SeedLock's Android app (a preview: build it yourself, see android/README.md).

SeedLock is not independently audited.

SeedLock 0.1.2

SeedLock 0.1.2: ready-made programs. The program itself works exactly as in 0.1.1.

Not independently audited yet. Try it on testnet, or with a small amount, first.

What's new:

Ready-made programs for Windows, Mac (Apple chip or Intel) and Linux (64-bit Intel or AMD), below. Download the one for your offline computer and check it with SHA256SUMS.txt, as the README explains (Part 1, Way A). Building it yourself (Way B) works as before.
Windows: the program now has Microsoft's C runtime inside it, so it also starts on a computer without the "Visual C++ Redistributable" (before, such a computer said "VCRUNTIME140.dll was not found").
The Linux program needs nothing from the system, so it runs on any 64-bit Intel or AMD Linux, old or new.

Check your download with SHA256SUMS.txt and its signature SHA256SUMS.txt.asc (release key E435 21D9 44AE 9BAA 9FB2 D11D 08B6 5FB6 5CB1 D806): see the README, Part 1, Way A.

SeedLock 0.1.1

First public release of SeedLock: it keeps your Bitcoin seed on a computer that is never connected to the internet, and signs there the payments that Sparrow Wallet prepares on your everyday computer.

Not independently audited yet. Try it on testnet, or with a small amount, first.

How to get it: download "Source code (zip)" below and follow the README: build the program on your online computer (Part 1), copy the one program file to your offline computer (Part 2), and start it there (Part 3). There are no ready-made programs to download.

What it does:

• creates a seed (optionally from your own dice rolls) and saves it as a password-encrypted backup file
• sets up a watch-only wallet in Sparrow
• checks and signs payments, from a file on a USB stick or by scanning Sparrow's QR code with the camera
• multisig wallets (native, nested and legacy SegWit)

Tested on Arch Linux, Debian, Ubuntu/Lubuntu, macOS and Windows.