search

PoC-Consortium / burstcoin-mobile

Burstcoin mobile wallet for Android and iOS https://play.google.com/store/apps/details?id=org.icewave.burstcoinwallet
GNU General Public License v3.0
21 stars 20 forks source link

Backup Passphrase #39

Open cgebe opened 6 years ago

cgebe commented 6 years ago

From @LithMage on October 14, 2017 17:8

Mobile Wallet needs to have a "Backup Passphrase" feature. It could be done by generating specific hashed link or just hash and sending it to user specified email. I am using Exodus wallets functionality as an example (it works real well too):

  1. Log into wallet.
  2. Start Backup Process.
  3. Enter backups password/key (for obvious reasons).
  4. Enter backups password/key again (for obvious reasons).
  5. Send the hashed link/whaterver to user specified email.

Backup restore process Enter the sent hash or if possible somehow link it as url that would open wallet app (would be harder to implement for desktop wallet but not impossible i think).

  1. Wallet requests Backups password/key
  2. if it checks out hash is decoded and passphrase added to app.

Copied from original issue: PoC-Consortium/burstcoin-mobile-doc#32

cgebe commented 6 years ago

Such a feature would imply to save the passphrase in an encrypted format on the device, because Burst does not support HD keypairs. Technically, it is EC-KCDSA which is used for keypair generation in Burst.

Another suggestion (by another user) was implementing an email notification after the password generation. If interest in such a backup feature exists it would be worth implementing. However, users should be fully aware of the circumstance that saving the passphrase somewhere else than on a privately kept piece of paper, e.g. in plain text in your inbox, is a security risk.

cgebe commented 6 years ago

From @LithMage on October 14, 2017 23:50

Loosing passphrase is even worse, also this way app can generate secure passphrase (now i might be wrong as i do not use mobile wallets at all, and there is already implemented good enough passphrase). Lets be honest - users are lazy.

cgebe commented 6 years ago

Further support in english on discord https://discord.gg/xenZTNw #mobile-wallet Issue persists