Verifying a wasabi wallet. #12770
-
|
I need help verifying a download of wasabi wallet using the terminal and code. I watched the video https://www.youtube.com/watch?v=QHIpEYYqddE and it was too advanced for me as I am unfamiliar with terminal etc. I entered cd Downloads and the response was "cd: no such file or directory: Downloads" Is there a video wasabi verification for grandpas? (tech dummies?) I want to use Wasabi and I want to be safe. Thank you (I'm on a mac) |
Beta Was this translation helpful? Give feedback.
Replies: 9 comments 12 replies
-
|
Hello, try these steps:
Let me know if you need additional help! |
Beta Was this translation helpful? Give feedback.
-
|
This will have several sections:
|
Beta Was this translation helpful? Give feedback.
-
This is normal, GnuPG is a command line program, which means that it works only from the terminal
It means you succeeded, and you are in your Downloads folder from the terminal. So now because in the next steps everything is in the Downloads folder, it will work |
Beta Was this translation helpful? Give feedback.
-
|
Also, make sure you downloaded from https://wasabiwallet.io/. You can also download from Github: https://github.com/zkSNACKs/WalletWasabi/releases/tag/v2.0.6 |
Beta Was this translation helpful? Give feedback.
-
|
Open Terminal and go to the folder in which you saved the zkSNACKsPubKey.txt file and import the PGP public key with sudo gpg --import zkSNACKsPubKey.txt. This should return the output: key 856348328949861E: public key "zkSNACKs zksnacks@gmail.com" imported. Stumped. I dont think it is supposed o be so challenging... |
Beta Was this translation helpful? Give feedback.
-
|
You don't HAVE to check the PGP signature. It's simply to be sure that the software you downloaded hasn't been tampered. But here you just have to copy and paste this to your terminal:
It will work if you followed the previous steps |
Beta Was this translation helpful? Give feedback.
-
|
I will try again tomorrow. The video makes it look so easy... |
Beta Was this translation helpful? Give feedback.
-
|
I really want to check because I got burned/spoofed with Sparrow. And while I thought I was cautious before now, I'm paranoid. (they didn't have my phrases so .....)
Thank you for your help.
When I paste this
MacBook-Air-2 Downloads % sudo gpg --import zkSNACKsPubKey.txt
Password:
sudo: gpg: command not found
What is peculiar - I usually download wallets to applications, but I have downloaded it to "Downloads" What happens when I lookg for Wasabi in Downloads it is there as a .dmg and a .dmg.asc file and. then it disappears or converts to a the txt file. Any suggestions. And again thank you for your patience.NN
Sent with [Proton Mail](https://proton.me/) secure email.
…On Friday, April 5th, 2024 at 2:15 PM, Turbolay ***@***.***> wrote:
You don't HAVE to check the PGP signature. It's simply to be sure that the software you downloaded hasn't been tampered. But here you just have to copy and paste this to your terminal:
sudo gpg --import zkSNACKsPubKey.txt
—
Reply to this email directly, [view it on GitHub](#12770 (reply in thread)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BHTFEWBSRNA3766NZQCET4DY34H5RAVCNFSM6AAAAABFYLYDO2VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TAMRWGEZTM).
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
this mean that you didn't install correctly GnuPG. You should install it correctly, then once done close and reopen terminal. To verify your installation, you can write
After closing and reopening the terminal you will have to go to Downloads again so do |
Beta Was this translation helpful? Give feedback.
-
|
yes GpnuP was not installed correctly I installed it for MAC to "Downloads." Weirdly, when I click on finder It is right at the top as GnuPG-2.45dmg. 17.4 MB and then after a few seconds it just disappears and is replaced by zkSNACKs.PubKey.txt
Installed it now.
gpg: key 856348328949861E: 5 signatures not checked due to missing keys
gpg: key 856348328949861E: "zkSNACKs ***@***.***>" not changed
gpg: Total number processed: 1
gpg:unchanged: 1
???
Thank you for your patience and persistance.
Sent with [Proton Mail](https://proton.me/) secure email.
…On Friday, April 5th, 2024 at 4:12 PM, Turbolay ***@***.***> wrote:
this mean that you didn't install correctly GnuPG. You should install it correctly, then once done close and reopen terminal. To verify your installation, you can write gpg --version in your terminal and this should output something like that:
***@***.*** (view on web)](https://github.com/zkSNACKs/WalletWasabi/assets/16029533/e107ab94-7af4-4eb1-9efe-a00c55e726d0)
After closing and reopening the terminal you will have to go to Downloads again so do cd ~/Downloads
—
Reply to this email directly, [view it on GitHub](#12770 (reply in thread)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BHTFEWCJZDM74Q76EP5MEBDY34VVXAVCNFSM6AAAAABFYLYDO2VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TAMRWG4ZTO).
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
I just tried and had no issue, I followed exactly these steps:
|
Beta Was this translation helpful? Give feedback.
-
|
These are the steps that I am using. And I got the same message. I don't want to bother you any more, perhaps I will try on a different computer and see what happens.
I appreciate your help.
Sent with [Proton Mail](https://proton.me/) secure email.
…On Friday, April 5th, 2024 at 5:36 PM, Turbolay ***@***.***> wrote:
I just tried and had no issue, I followed exactly these steps:
- Go to this link and download the file https://github.com/zkSNACKs/WalletWasabi/blob/master/PGP.txt by clicking on this button
***@***.*** (view on web)](https://github.com/zkSNACKs/WalletWasabi/assets/16029533/d719548f-c793-4ee7-b965-0a6f442d0c8c)
- Open Terminal, cd ~/Downloads
- Write sudo gpg --import PGP.txt (take care about the name, it should be PGP.txt)
- Enter your password and press enter
-
***@***.*** (view on web)](https://github.com/zkSNACKs/WalletWasabi/assets/16029533/f6e6e4d9-58f7-456b-a67a-c0b8ab1b16a3)
—
Reply to this email directly, [view it on GitHub](#12770 (reply in thread)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BHTFEWDGUE36MNCVU6QI223Y347QVAVCNFSM6AAAAABFYLYDO2VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TAMRWHE4TG).
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
Ok I know what happened, you already have this key, it means it worked. So you can go to the next step |
Beta Was this translation helpful? Give feedback.
-
|
Don't give up now you're at the final step :D You will see Which means you are OK |
Beta Was this translation helpful? Give feedback.
-
|
Downloads % sudo gpg --verify Wasabi-2.0.6-arm64.dmg.asc Wasabi-2.0.6-arm64.dmg
Password:
gpg: Signature made Thu Feb 29 01:40:58 2024 PST
gpg:using RSA key 6FB3872B5D42292F59920797856348328949861E
gpg: Good signature from "zkSNACKs ***@***.***>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:There is no indication that the signature belongs to the owner.
Primary key fingerprint: 6FB3 872B 5D42 292F 59920797 8563 4832 8949 861E
[Screenshot 2024-04-06 at 11.24.35 AM.png]
wow. good news.
Can you please tell me what does it mean " gpg: WARNING: This key is not certified with a trusted signature!"
Again thank you for your help.
Sent with [Proton Mail](https://proton.me/) secure email.
…On Saturday, April 6th, 2024 at 8:24 AM, Turbolay ***@***.***> wrote:
Don't give up now you're at the final step :D
Just write this in your terminal:
sudo gpg --verify Wasabi-2.0.6-arm64.dmg.asc Wasabi-2.0.6-arm64.dmg
You will see
***@***.*** (view on web)](https://github.com/zkSNACKs/WalletWasabi/assets/16029533/77e5b0b2-6c60-4fbd-8178-431efd516768)
Which means you are OK
—
Reply to this email directly, [view it on GitHub](#12770 (reply in thread)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BHTFEWDMR3HBICRDIHXNUR3Y4AHR3AVCNFSM6AAAAABFYLYDO2VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TAMZQGE3TQ).
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
It's simply a warning that the key (PGP.txt) you tested is not in your personal trust database. In simpler terms it means that nobody can be sure the key you tested is actually from zkSNACKs, but as long as you downloaded the key on the Github repository as I told you to, you're good. |
Beta Was this translation helpful? Give feedback.
-
|
Glad you figured it out! |
Beta Was this translation helpful? Give feedback.
-
|
On another note I had downloaded BitcoinCore. Do you recommend that I sync it with Wasabi? or use that? And is there anyway that it makes my computer more vulnerable. (you indicated I wasn't bothering you).
Sent with [Proton Mail](https://proton.me/) secure email.
…On Saturday, April 6th, 2024 at 11:26 AM, mam.204 ***@***.***> wrote:
Downloads % sudo gpg --verify Wasabi-2.0.6-arm64.dmg.asc Wasabi-2.0.6-arm64.dmg
Password:
gpg: Signature made Thu Feb 29 01:40:58 2024 PST
gpg:using RSA key 6FB3872B5D42292F59920797856348328949861E
gpg: Good signature from "zkSNACKs ***@***.***>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:There is no indication that the signature belongs to the owner.
Primary key fingerprint: 6FB3 872B 5D42 292F 59920797 8563 4832 8949 861E
[Screenshot 2024-04-06 at 11.24.35 AM.png]
wow. good news.
Can you please tell me what does it mean " gpg: WARNING: This key is not certified with a trusted signature!"
Again thank you for your help.
Sent with [Proton Mail](https://proton.me/) secure email.
On Saturday, April 6th, 2024 at 8:24 AM, Turbolay ***@***.***> wrote:
> Don't give up now you're at the final step :D
> Just write this in your terminal:
> sudo gpg --verify Wasabi-2.0.6-arm64.dmg.asc Wasabi-2.0.6-arm64.dmg
>
> You will see
> ***@***.*** (view on web)](https://github.com/zkSNACKs/WalletWasabi/assets/16029533/77e5b0b2-6c60-4fbd-8178-431efd516768)
>
> Which means you are OK
>
> —
> Reply to this email directly, [view it on GitHub](#12770 (reply in thread)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BHTFEWDMR3HBICRDIHXNUR3Y4AHR3AVCNFSM6AAAAABFYLYDO2VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TAMZQGE3TQ).
> You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
In general using your own BitcoinCore node is better, but not mandatory. It's better for privacy reasons and to verify your own blocks. Because Wasabi protects your privacy on many levels, using it on its own is usually enough for most users' use case, but using your own node is always better. See https://docs.wasabiwallet.io/FAQ/FAQ-GeneralBitcoinPrivacy.html#why-is-it-important-to-run-a-full-node It doesn't make your computer more vulnerable, as long as you don't download malware, you're good. The sync with Wasabi should be automatic. You can use an external full node, or you can also use Wasabi's built in node. You can read detailed articles in the documentation for more details https://docs.wasabiwallet.io/using-wasabi/BitcoinFullNode.html#using-an-already-existing-local-bitcoin-full-node |
Beta Was this translation helpful? Give feedback.
-
|
awesome help. thank you |
Beta Was this translation helpful? Give feedback.
-
|
Thank you.
Sent with [Proton Mail](https://proton.me/) secure email.
…On Saturday, April 6th, 2024 at 12:22 PM, Turbolay ***@***.***> wrote:
In general using your own BitcoinCore node is better, but not mandatory. It's better for privacy reasons and to verify your own blocks. Because Wasabi protects your privacy on many levels, using it on its own is usually enough for most users' use case, but using your own node is always better. See https://docs.wasabiwallet.io/FAQ/FAQ-GeneralBitcoinPrivacy.html#why-is-it-important-to-run-a-full-node
It doesn't make your computer more vulnerable, as long as you don't download malware, you're good.
The sync with Wasabi should be automatic. You can use an external full node, or you can also use Wasabi's built in node. You can read detailed articles in the documentation for more details https://docs.wasabiwallet.io/using-wasabi/BitcoinFullNode.html#using-an-already-existing-local-bitcoin-full-node
—
Reply to this email directly, [view it on GitHub](#12770 (reply in thread)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BHTFEWEPX7CH7XKCNEHBG4TY4BDPLAVCNFSM6AAAAABFYLYDO2VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TAMZRGQ2TA).
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
Hello, try these steps:
cd ~/Downloadsin the terminal, then enterLet me know if you need additional help!