-
Notifications
You must be signed in to change notification settings - Fork 44
Easy wallet export to mobile (first gen.) #437
Comments
Since the password is not stored anywhere, the user would need to enter their password in order to encrypt the mnemonic and show the QR code. Actually, it won't have to be the same password. As long as the same password is used to encrypt the unencrypted mnemonic on the desktop wallet side, and the same password is used on the mobile wallet on the decrypting side, it will work. It could just be a temporary password, just for the transfer of the mnemonic. I like this approach more, personally, so that the user doesn't have to add their desktop wallet password on the mobile wallet (in principal, a password should not be used in more than 1 place, and for one purpose). On a second note, do you think it's really necessary to encrypt the mnemonic before showing it in the QR code? |
Yes. If for whatever reason a user displays the qr code in a public place (this can happen easily when playing with the app in a train or in a coffee...), anyone could snap a picture from afar and get the mnemonic. So easy. |
This was implemented in #440 and merged into the |
Linked to #183.
Idea : we could encrypt the mnemonic and encode the resulting string in a QR code. Scanning this on the mobile wallet would ask the user for the same password used on the desktop wallet to encrypt the key.
If the password is correct, the wallet is recovered.
We could experiment with adding the metadata in the QR Code as well.
Let's see if we could ship this in 2.0.
The text was updated successfully, but these errors were encountered: