How to make a cost-friendly monero hardware wallet at home with stuff from amazon : OpSec | Torhoo darknet markets

If you have multiple monero wallets and are paranoid about it like me, here's a quick guide that I use myself to make monero hardware wallets for around $50.
What you'll need is:
Raspberry Pi Zero W (or WH)
16GB microSD
microSD to usb adapter if needed (depending on which model of raspberry you choose)
Micro USB OTG
USB A to MicroUSB cable
Small USB powered hub
Pi zero enclosure to keep things neet
a 1000-2000 USB mAh power bank

The steps
Flash Raspbian Lite on the SD card and enable ssh, after that boot your pi zero via the power bank and ssh in using the USB-OTG

Harden the OS and then download and verify Monero CLI should look like this:

cd ~
wget https://downloads.getmonero.org/cli/monero-linux-armv7*.tar.bz2
wget https://downloads.getmonero.org/cli/monero-linux-armv7*.tar.bz2.sig

and after you import monero's key

gpg --verify monero-*.tar.bz2.sig

after that unpack and set up then generate your wallet offline

tar xvjf monero-linux-armv7*.tar.bz2
cd monero-*/
chmod +x monero-wallet-cli monerod

then to generate your wallet offline use

./monero-wallet-cli --wallet-file coldwallet

then on your pc which is online run monero-wallet-cli connected to a node and use transfer --unsigned-tx-file unsigned.tx to produce and unsigned file and copy the file (for example: transaction1.tx) to a usb drive and import it to the Pi Zero

run this command on the pi zero

./monero-wallet-cli --wallet-file coldwallet --unsigned-transactions-file unsigned.tx \
--save-unsigned /transaction1.tx

make sure u get the path to the file correctly

after that once the file is signed, copy it back on your pc and use submit to broadcast it.

we all know XMR is amazing for opsec but this level of set up gives you god tier opsec as its a true airgap; once you’ve flashed the OS and verified your Monero CLI binaries, the Pi Zero lives completely offline. No Wi-Fi, no Bluetooth, no Ethernet so remote attackers have no network path in. and all transactions are physical. Oh and there are many more security elements to incorporate, like tor to broadcast your transactions and so on.

If anyone has any questions about the set up, don't hesitate!