sparrowwallet / sparrow

Desktop Bitcoin Wallet focused on security and privacy. Free and open source.
https://sparrowwallet.com/
Apache License 2.0
1.28k stars 181 forks source link

[Feature Request]Export WIF private keys from addresses #1445

Open jonjonez opened 2 months ago

jonjonez commented 2 months ago

I haven't found this possibility within the Sparrow app, is it within the roadmap in implementing it?

I know that only the BIP39 seed has access to all the data necessary to create and restore the wallet, however, at some point the user will need to have access to a single key from a public address, and if he wants to do this, he you will have to jump from app to app to get where you want, like having to enter iancoleman html.

It would be easier, more practical and safer if you had it all in one app.

pycanis commented 2 months ago

Just asked the same thing on reddit today!

craigraw commented 2 months ago

I know that only the BIP39 seed has access to all the data necessary to create and restore the wallet, however, at some point the user will need to have access to a single key from a public address

It's not clear to me what the use case for this requirement is.

Exposing private keys in any fashion introduces another attack vector for scammers to exploit. A lot of user education has gone into explaining that BIP39 seed words should not be shared - much less so for formats like WIF, which are difficult to identify for the average user.

In addition, the use of HD wallets has replaced the use of single key wallets, which commonly lead to address reuse. The WIF format is part of this legacy wallet approach, and adding this functionality would serve to encourage use of the old approach we are trying to leave behind.

For both of these arguments to be overcome, strong substantiation would be needed.

pycanis commented 2 months ago

I'm learning to build a raw transaction and having the ability to export a private key of a single address would be helpful. Other than that I completely agree with your reasoning - it doesn't make sense for a regular user.

craigraw commented 2 months ago

I appreciate this use case, but I think I must unfortunately err on the side of security with this tradeoff.