My goal here is to setup a system that is sufficiently convenient that I will actually utilize it without having to jump through too many hoops to get the job done, but also reasonably secure from hacking & theft.
Scenario - Transfer money from wallet to exchange.
- Full disk encryption, PC - Windows 10
- Private keys are stored in an encrypted offline password manager (keepass)
- Windows 10 has an Ubuntu VM installed on it (within the host system so it is encompassed by the full disk encryption).
- The Ubuntu has access to a copy of the offline password manager (keepass)
- Once we've received the address to which we'll want to send our coins we'll have to copy this address, open up the Ubuntu VM and paste it there (requires shared clipboard)
- After having pasted the address to which we wish to send the coins, we'll turn off the shared clipboard (not sure if possible without rebooting VM), open up the copy of the password manager database and launch wallet software (Electrum for BTC, myetherwallet for ETH, etc) and then access wallet using the private keys in the database.
- We'll send the payment and then exit the VM.
So, I'm not sure if this is the best most convenient way (pretend that the wallets contain significant values in a relative to the individual sense), I'm also not sure if this in anyway actually protects us from keyloggers (the keystrokes are probably going to be logged by both systems regardless - but perhaps the clipboard will not be logged by the host system if we can turn it off or just use it directionally; since the ubuntu system is much less likely to have been exposed as it is a fresh install and rarely accessed - and doesn't actually need to visit any outside servers aside from connecting to the electrum / myetherwallet servs).
How could I optimize this setup without making it unbearably inconvenient to use for transacting (be it small or large)?