Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Show seed anytime" mode #3650

Open
matejcik opened this issue Mar 26, 2024 · 0 comments
Open

"Show seed anytime" mode #3650

matejcik opened this issue Mar 26, 2024 · 0 comments

Comments

@matejcik
Copy link
Contributor

Follow-up to #3640

Option (4) would essentially introduce a mode that would allow the user to show their recovery seed at any time, protected by just the device PIN.

Product-wise, this is a significant departure from the previous approach, and there are some notable security drawbacks, namely, it's no longer possible to audit when the seed was viewed.
(Regardless of chosen protection mechanism, there is always an attack of "steal Trezor, grab seed, buy a new Trezor, recover the old seed into it, give it back to victim".)

OTOH, there are legitimate usecases, and such feature could be beneficial esp. for advanced users.

There is the option of implementing this "show seed anytime" mode hidden behind safety-checks, such that:

  1. user lowers safety checks
  2. user enables "show seed anytime" by running through dry-run recovery (more precisely, "unlock backup" flow from Implement repeated backup #3640)
  3. safety checks are re-enabled
  4. Trezor stays in "show seed anytime" mode

We might also want to only allow this mode if PIN is set, and protect the call by force-prompting for PIN.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: No status
Development

No branches or pull requests

1 participant