How Secure Is The Web Wallet?

Discussion in 'Security' started by achillez, Feb 8, 2016.

  1. 2017/12/15 - Decred v1.1.2 released! → Release Notes  → Downloads
  1. achillez

    achillez New Member

    Jan 11, 2016
    8
    2
    Male
    Just curious - wondering if I can put coins in there "safely"
     
  2. achillez

    achillez New Member

    Jan 11, 2016
    8
    2
    Male
    oh related question - when you create a wallet it shows testnet underneath the name.. although I explicitly told it to not create a testnet wallet. Is this a bug?
     
  3. achillez

    achillez New Member

    Jan 11, 2016
    8
    2
    Male
    .. and lastly would like to "lock it" with a stake but the web wallet doesn't have that as an option. Guess color me a bit confused
     
  4. Lee Sharp

    Lee Sharp Sr. Member

    Dec 28, 2015
    308
    217
    Male
    Independent Consultant
    Houston, Texas
    Based on what has been said here, the code actually runs in your browser, and nothing is ever run on the server. This also means if you clear your browser cache, you will need to re-input your seed.

    On the other hand, it would be trivially easy for someone to put something less then honest on a website. Trust it with what you can afford to lose.
     
    Suraj likes this.
  5. davecgh

    davecgh Hero Member
    Developer Organizer

    Dec 31, 2015
    642
    788
    Male
    United States
    The wallet is a fork of https://copay.io/, so it is as secure as that. As Lee stated, the seed (and hence private keys) are kept and computed locally in your browser's local storage and everything is run client side. The server never has access to any of the private data needed to spend coins.
     
    Suraj, Rune S and Lee Sharp like this.
  6. shoshin

    shoshin Member

    Dec 28, 2015
    86
    94
    Male
    Hi Dave, since we're using a fork of a Cordova app will there be Chrome extension and Android app released or will it be exclusively hosted online?
     
  7. davecgh

    davecgh Hero Member
    Developer Organizer

    Dec 31, 2015
    642
    788
    Male
    United States
    I'm not 100% on the plans there, but I believe that was part of the reasoning given for choosing that as the base back when it was being discussed.

    Either way, the code is available on Github, so I would assume there is no problem with a Chrome extension/Android app.
     
    Lee Sharp likes this.
  8. Lee Sharp

    Lee Sharp Sr. Member

    Dec 28, 2015
    308
    217
    Male
    Independent Consultant
    Houston, Texas
    It is not real clear what code is what on github. Any clue what parts are used and how for the web wallet and blockchain explorer?
     
  9. adam2312

    adam2312 Jr. Member

    Jan 11, 2016
    118
    43
    Male
    It appears a bug to me; I was able to confirm it was on main net going into advanced settings for the wallet. Also, the address starts with Ds. Was able to successfully send main net dcrd to the wallet.
     
  10. eleonor

    eleonor New Member

    Jan 3, 2016
    1
    0
    hi when will be good win wallet?
     
  11. davecgh

    davecgh Hero Member
    Developer Organizer

    Dec 31, 2015
    642
    788
    Male
    United States
    @shoshin was referring to the copay forked code. That is at https://github.com/decred/copay. I also know they depend on Insight and I suspect it depends on the other stuff forked from Bitpay. That said, I'm just guessing as I'm not involved at all in the wallet dev, so I don't really know for sure what depends on what. One of the wallet devs would have to answer that.
     
  12. Lee Sharp

    Lee Sharp Sr. Member

    Dec 28, 2015
    308
    217
    Male
    Independent Consultant
    Houston, Texas
    Cool... That is a start. I am just wanting to put the code on a private server for myself and some friends. That whole "not trusting anyone" thing. :)
     

Share This Page