How to Secure Bitcoin Wallet - Protectimus Solutions

I wanted to use Bitcoin Core to keep an eye on transactions (basically using your own full Bitcoin node to validate, instead of "trusting" Satoshilabs and their webwallet). This doesn't mean there's anything wrong with Satoshilabls' trezor web wallet - it's just a matter of being totally sovereign/independent - if you want that, then using your own Bitcoin Core full node is a must.
Spent some time investigating how to do that, so sharing here in case someone wants it. Feel free to point any ways to do it better.
How-To:

1. Go to the usual Trezor wallet site, then open the wallet you want to import to Core (don't forget passphrase if needed). Copy the ypub text string.
   
2. Convert the ypub to xpub using something like this: https://jlopp.github.io/xpub-converte You can save the page and run it offline/airgapped in something like Tails if you don't trust it. There is no security risk (not a private key) but only privacy risk (with your public keys the site can see all transactions/balances of that wallet)
   
3. Put the xpub in a Core RPC importmulti command with this formatting:
   importmulti '[{"range": [0, 1000], "timestamp": "now", "keypool": true, "watchonly": true, "desc": "wpkh([000000f1/84h/0h/0h]your_xpub_goes_here/0/)#7x87wdy3", "internal": false}, {"range": [0, 1000], "timestamp": "now", "keypool": true, "watchonly": true, "desc": "wpkh([000000f1/84h/0h/0h]your_xpub_goes_here/1/)#0jzlnc5f", "internal": true}]'
   

Then open Bitcoin Core and do these other steps...

1. In File>Create Wallet, create a wallet with "No Encryption" & "Watch Only" - call it anything you like (TrezorA for example).
   
2. Open Window>Console, select the wallet you just created (on the pull-down menu at the top) and then paste the importmulti command where you put your xpub.
   
3. Core will complain that the checksum is wrong (the "7x87wdy3" and "wdxy2s2t" parts in my example) replace them with the right ones shown in the message and retry.
   
4. You should see the wallet imported with success, but with no transaction history. It is necessary to rescan the chain to index the transactions that wallet made. To save time, you can use the blockheight of the first block where you made a transaction with that trezor, for example: "rescanblockchain 590500".
   

You can find out the block by putting the hash of your first transfer in a block explorer like https://live.blockcypher.com/, look for "blockheight" If you have no idea which block has your first transaction, you can just rescan the whole chain by typing "rescanblockchain 0" in the console (but Core will take way longer to do it).
That's about it, all transactions made from what wallet should then appear in Core and it will warn every time funds are received or spent. You can be running your own full node and constantly monitoring your wallet, without having to use the Trezor or load Satoshilab's site.
You cannot spend from that wallet in Core, but you can use it to generate receive addresses and send to it (keep in mind that if you generate bech32 addresses in Core, those transfers will not appear at Trezor wallet since it doesn't support it yet :| )
Edit: Forgot change addresses, fixed importmulti example.

'''
That really depends on how they implement it. 1Password has a seperate file structure that contains the passwords. This can be moved around like any file to anywhere and stored anywhere so you have full control over it. It can only be decrypted with your passphrase. The file is "1password.agilekeychain" which is a package (on OSX) and it also contains an html file that allows you to load passwords from it directly from any web browser if you bring the file archive around with you. Accessing it this way also works for OSes where they don't have standalone applications for it.

Is there any advantage in using 1Password versus using Chrome's built-in password storage?

1Password supports things like:

• The most important feature, random password generation to generate maximal strength passwords of 50+ characters with random alpha-numeric-symbol passwords. These are basically unrememberable so it forces you to use the password manager to retrieve them, but you can paste them into most forms with a hotkey. It can also generate xkcd-style passwords (dictionary words separated by dashes). When it posts to web forms it avoids your copy-paste as well so your password never enters your OS's pastebin where it could possibly be snooped by malicious software on your system.
• Security Audit that will check your entire set of passwords for weak passwords that you may have created and forgot about. It also checks for repeated passwords across different logins. Or Old Passwords
• Can store: Credit Cards, Bank Accounts, Social Security Number, Software Licenses, Database passwords, Server passwords, Wireless network passwords, supports creating encrypted notes for storing arbitrary data (good place to store bitcoin wallet private keys, though I haven't used it for this yet) and it can autofill most of these datatypes through it's browser plugins so it doesn't force you to use Chrome if you prefer to use Firefox for example
• Supports password tagging so you can say tag all your company passwords with a tag so they're easy to separate from personal accounts.
• Can create multiple separate vaults that are separately encrypted if you want to divide say work passwords from personal passwords so you never have to type your personal password into a possibly key-logged system (if you're paranoid about your employer)
• It has API support so certain applications can access 1Password to fetch login information via a secure-vault like system

sync across my Linux desktop, my Mac laptop, and my Android phone

1Password works on iOS, Android, Mac and Windows. For whatever reason, they see no need to support Linux. It seamlessly syncs across everything.

Given that my synced Chrome data is encrypted locally with a passphrase

Is it actually encrypted locally? One of the reasons I like 1Password is that it's effectively guaranteed to be subpoena resistant so in the event that a government goes rogue its still protected. Additionally you have no control over Google updating Chrome. If they so wished they could push an update to Chrome that fed all the passwords of a selected user back to them without your knowledge. With 1Password I maintain control of the data and the software update mechanism.
'''
Context Link
Go1dfish undelete link
unreddit undelete link
Author: ergzay

So I just traded some other alts to doge, then realized my doge wallet was out of date. Updated it, went to send some to the tip bot and suddenly my passphrase wasn't working. I'm not sure if updating the wallet broke it, or if I forgot my passphrase (haven't sent out any to the tipbot in a while).
What are my options? There's only 25.5k in there so it's not the end of the world I guess but still pretty sad if I can't get em back :(
EDIT: Does anyone at least know if the wallet encryption is the same as a bitcoin wallet? I've been trying to use john the ripper to crack the hash with giant wordlists generated from my common passwords but no luck so far