Is Foundry actually safe to generate private keys and mnemonic for production?

[lildata]

Hello,

I went through the documentation, the code and dependencies as much as I could but it is not clear to me if Foundry and Cast are meant and secure enough to generate private keys and mnemonic for Production and securing funds.

Some comments in the code would suggest to be careful overall

foundry/crates/anvil/src/cmd.rs

Line 69 in 97fba0a

/// CAREFUL: This is NOT SAFE and should only be used for testing.

By secure enough for production I mean something in the same ballpark as Metamask.

I understand Foundry is not meant to be a wallet but since the functions exists people might assume it is secure.

Many thanks

[zerosnacks]

Hi @lildata

What is meant by that comment is that it is insecure if you pass in a seed for the mnemonic instead of relying on probable secure randomness.