search

ripple / ripple-client

A UI for the Ripple payment network built using web technologies
ISC License
1.34k stars 494 forks source link

Is this a bug?I can't change my passphrase? #675

Closed vipjeffreylee closed 11 years ago

vipjeffreylee commented 11 years ago

Can you tell me how to change my passphrase?

JoelKatz commented 11 years ago

There is no point. If you did that, you would have two passphrases you would have to protect forever to keep your account secure. There is no way (short of very expensive, secure hardware) to stop a key from decrypting anything it ever was able to decrypt. If you let people think they can change a passphrase, you get the wikileaks unredacted cable fiasco. http://www.huffingtonpost.com/2011/09/01/wikileaks-guardian-cables-breach_n_944595.html

This is not a password that goes off to some server that has the right to let you use or not use some service. This password actually provides the capability for your own machine to access the service. There is no higher power to deny it that access.

chanba commented 11 years ago

If you want to change password currently you would need to make a new address and transfer all your funds (minus reserve) to the new address, but that means updating all trust lines as well, which in the future might become a headache. I'm happy I put strong passwords on my wallets, but I really think there should be a note when you create your wallet that the password is not changeable...

Also, could you comment on this? https://github.com/rippleFoundation/ripple-client/issues/663#issuecomment-18038296

singpolyma commented 11 years ago

This is exactly why I think we need a way to "close" an account and get all the XRP out. To deal with compromised accounts / passwords.

JoelKatz commented 11 years ago

You can drop all the trust lines to zero, transfer out any funds, and then never use the account again. You still need to leave the reserve in to "pay for" the ledger space.