search

hivewallet / hive-js

Hive digital currency wallet
http://www.hivewallet.com
GNU General Public License v2.0
81 stars 57 forks source link

Solve for people ignoring the backup seed. #208

Open dabura667 opened 10 years ago

dabura667 commented 10 years ago

After introducing this wallet to a few people, I see two things happen VERY often that are facilitated by the "only show the seed once" aspect.

  1. They skip the phrase completely, ignoring the message, checking the box and hitting ok. Which I then must stop them, make them create a new wallet and tell them to write it down. We were at a bar and they had to get a bar napkin and pen from the bar tender. They ended the experience with "that was way too complicated."
  2. They screenshot the passphrase. Super unsafe.

breadwallet had a discussion about this over on their repository.

https://github.com/voisine/breadwallet/issues/65

He solved it as such:

On the screen showing the passphrase. There is a button saying "Write it down later." which skips the passphrase screen. However, if you wait for 10 seconds on that screen (assumes it will take longer than that to write down the seed physically on paper) a checkbox appears that says "I have written down the seed."

If you wait for the checkbox AND check the box. The Button text changes to "Continue to wallet" or something.

If the checkbox was checked, everything is normal.

If the checkbox wasn't checked. AND there is any transaction history on the wallet (including receiving), it will remind you on opening the app every time to write down the seed with a "remind me later" button. If you tap "write down the seed" it will ask for PIN and then show the seed again. Also, with the 10 second delay with the checkbox thing (so the passphrase writedown screen is the same instance that is shown on wallet creation with no alterations.

Some system like this will help people who are just trying to get set up on the spot, I believe.

This way they can use it normally without having to have their first experience be a painful one.

I was thinking. Maybe you could change the storage to encrypt the BIP39 input entropy (that creates the mnemonic) or the BIP39 phrase itself ALONG WITH the final BIP32 chain and Master Private Key. This way a similar system as the above could be used to remind the user of their seed if they have yet to write it down.

ghost commented 9 years ago

@mattatgit Matt, this is one we should work on solving now, for Hive 2.0. So I'm leaving it open.

mattatgit commented 9 years ago

@w what we have been discussing is to allow the seed phrase to be shown in the settings, behind a PIN lock (which then requires PIN reset method ie email etc l). If we go that way, we don't need to use the above method which while sensible, also sounds pretty annoying. Let's discuss this further.