near / near-wallet-roadmap

near-wallet-roadmap
Apache License 2.0
8 stars 0 forks source link

Read-only accounts #10

Open stefanopepe opened 3 years ago

stefanopepe commented 3 years ago

Summary Today, all the accounts that are visible on wallet.near.org have also full-access keys - which means that NEAR web wallet has private-key material and is able to perform call methods or token transfers.

Power users who manage large amounts of tokens (and multiple accounts) need ways to visualize their assets portfolio, without giving up their private keys - which are safely managed on air-gapped machines or hardware wallets.

Intended Outcome As a user, I want to add view-only accounts to my NEAR Wallet, such that I can track my holding without worrying too much for wallet.near.org security.

This feature will begin a UX research effort for "public" assets and the soon-to-come "private" assets - e.g. the ones using zero-knowledge proofs to decode the internals (as it is today for the vesting schedule of certain lockup contracts).

How will it work? NEAR wallet will enable users to manually add and track certain accounts, without authorizing the correlated private keys. This feature will require specific UX research, to help users better understand the transparent nature of NEAR (and distributed ledgers in general). In presence of "private" assets, the interface may introduce a middle-step asking the user some information to decode any encrypted meta-data.