Skip to content

v4.0.66

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Aug 01:33
· 20 commits to develop since this release
v4.0.66
c66b92a

What's new

An optional passphrase — a word of your own that makes your written recovery phrase useless to anyone who finds it.

  • You can now add a passphrase when you create a wallet. It is an extra word or sentence of your choosing, and with one set your twelve or twenty-four words are no longer enough on their own to open the wallet. Someone who finds the paper you wrote them on cannot spend your coins.

  • This is worth understanding before you use it. The most common way people lose a recovery phrase is not malware — it is the paper: a photo that quietly syncs to a cloud account, a drawer somebody else opens, a “support agent” who asks you to type your words to “verify” your wallet. A passphrase makes all of those useless.

  • It is completely optional and switched off. It sits behind an “Advanced” line on the screen that shows your recovery phrase, closed unless you open it, and a wallet made without it behaves exactly as before. Existing wallets are never offered one and are entirely unaffected — adding a passphrase to a wallet you already have would produce a different wallet with different addresses, not an upgrade, so the wallet does not pretend otherwise.

  • The important warning, and the reason to think before switching it on: write the passphrase down with your recovery phrase and keep both. Unlike the twelve words, a passphrase has no built-in check for mistakes. Get one character wrong and you do not see an error — you see a real, working, completely empty wallet. If you lose it, those words alone will not bring your coins back, and nobody can recover it for you.

  • Because of that, the wallet asks you to type it twice when you set it up, shows it alongside your recovery phrase whenever you view that, and — when you are restoring — checks whether the phrase you entered has funds without the passphrase too. If it does, it tells you so plainly instead of reporting “no funds found”, which is the message most likely to make someone think their savings have been stolen when they have simply mistyped a word.

  • One thing said honestly: the passphrase protects the phrase you wrote down. On the phone itself, your PIN is still what keeps the wallet locked.

  • This was tested end to end on the main chain with real coins — created with a passphrase, funded, restored on a second phone, and sent back — and the addresses it produces were checked against an independent implementation, so a wallet made here can be restored in other standards-compliant wallets.

  • Also fixed while testing: failing the “confirm your recovery phrase” quiz told you to go and review your phrase from a screen that gave you no way to do it. There is now a button.

SHA-256: b367d3545c9676b7f470c8f09d757b100538d35ff2b4005d2699ec404353b63a

Download from digiscope.me/downloads/ or install the APK below. Requires Android 8.0+.

Source: https://github.com/JohnnyLawDGB/digibytewallet-android

Assets 3
Loading