You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When launching firo-qt for the first time, the user is asked to save the mnemonic seed, but it's not possible to copy-paste it and the only way to save it is to manually type/write it somewhere. After this step the user is asked to type the seed manually, to confirm they have saved it.
While this is the most secure approach, as it assures the user has actually saved the seed somehow, it's also a time-consuming and boring process. The drawbacks i see are:
Users who want to fire up a Firo wallet to simply check it out, will be forced through this time consuming, and for them unnecessary, step. Lazier or elder users might just decide to not go through with it.
People are used to copy-paste. Declining this possibility is frustrating for the user because forces them to either open a note software (something they might have rarely done), go look for a piece of paper and a pen, or worse, choose the easiest way and save it in insecure ways (e.g a whatsapp chat)
Noting the seed on a piece of paper doesn't necessarily mean it will be stored securely
It worth investigating different approaches that could be a good compromise between security and usability. For example:
When asking to confirm the seed, ask only some words instead of all of them (e.g the 4th, 8th and 10th words). This would save a lot of time, but requires some ui changes (like numbering the words of the seed)
Allow to copy paste the seed
Only ask the user confirmation that they have noted down the seed. This is the most insecure option, because there is no assurance the seed was actually noted down, but it's the most flexible and fast for the user
The text was updated successfully, but these errors were encountered:
Fully agree with @erciccione . As an addition to the possibility of copy and paste, maybe also an "copy to clipboard" icon to right if the seed phrase window to ensure that all was copied.
When launching
firo-qt
for the first time, the user is asked to save the mnemonic seed, but it's not possible to copy-paste it and the only way to save it is to manually type/write it somewhere. After this step the user is asked to type the seed manually, to confirm they have saved it.While this is the most secure approach, as it assures the user has actually saved the seed somehow, it's also a time-consuming and boring process. The drawbacks i see are:
It worth investigating different approaches that could be a good compromise between security and usability. For example:
The text was updated successfully, but these errors were encountered: