Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't ask for password on app start up if we the user has already created an account #1811

Open
piyalbasu opened this issue Jan 21, 2025 · 1 comment

Comments

@piyalbasu
Copy link
Contributor

piyalbasu commented Jan 21, 2025

Currently in Freighter, we ask for a user's password at the beginning of a session because all we store in localStorage is the user's encrypted key blobs. The password is needed to get both the public and private keys. The private key is erased after the session times out. The public key is erased when the user is upgraded/reloads the extension

We want to move to a UX where the password is only required when signing a tx (.i.e, when we need the private key). In order to accomplish this we will need to:

Acceptance Criteria:

  • Store all the user's public keys in localStorage so they persist after extension upgrade

Companion ticket:

@piyalbasu piyalbasu changed the title Only ask for user password when signing tx's Don't ask for password on app start up if we the user has already created an account Jan 21, 2025
@piyalbasu
Copy link
Contributor Author

Suggestion from Cassio: Include a "require password on app startup" setting for users that are more conservative

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant