Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[firo-qt] Consider not forcing people to write down their seed manually #1262

Open
erciccione opened this issue Jun 24, 2023 · 2 comments
Open

Comments

@erciccione
Copy link
Contributor

When launching firo-qt for the first time, the user is asked to save the mnemonic seed, but it's not possible to copy-paste it and the only way to save it is to manually type/write it somewhere. After this step the user is asked to type the seed manually, to confirm they have saved it.

While this is the most secure approach, as it assures the user has actually saved the seed somehow, it's also a time-consuming and boring process. The drawbacks i see are:

  • Users who want to fire up a Firo wallet to simply check it out, will be forced through this time consuming, and for them unnecessary, step. Lazier or elder users might just decide to not go through with it.
  • People are used to copy-paste. Declining this possibility is frustrating for the user because forces them to either open a note software (something they might have rarely done), go look for a piece of paper and a pen, or worse, choose the easiest way and save it in insecure ways (e.g a whatsapp chat)
  • Noting the seed on a piece of paper doesn't necessarily mean it will be stored securely

It worth investigating different approaches that could be a good compromise between security and usability. For example:

  • When asking to confirm the seed, ask only some words instead of all of them (e.g the 4th, 8th and 10th words). This would save a lot of time, but requires some ui changes (like numbering the words of the seed)
  • Allow to copy paste the seed
  • Only ask the user confirmation that they have noted down the seed. This is the most insecure option, because there is no assurance the seed was actually noted down, but it's the most flexible and fast for the user
@reubenyap
Copy link
Member

Makes sense. I'll put in the list!

@mobias17
Copy link

Fully agree with @erciccione . As an addition to the possibility of copy and paste, maybe also an "copy to clipboard" icon to right if the seed phrase window to ensure that all was copied.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants