Recovery phrase verification should use randomized word indices #24683
Labels
feature/web3/wallet
Integrating Ethereum+ wallet support
front-end-change
This task is a front end task and doesn't need any C++ changes
onboarding
Front-end related to helping a new user learn about features within the browser.
OS/Desktop
priority/P3
The next thing for us to work on. It'll ride the trains.
QA Pass-Linux
QA Pass-macOS
QA Pass-Win64
QA/Yes
release-notes/include
security
Milestone
Description
brave/brave-core#13146 (comment)
When creating a new wallet during onboarding, the user is always asked to verify the first, third, and last words of their recovery phase.
We should randomize these words to deter users from not properly backing-up their recovery phrase
Steps to Reproduce
Actual result:
The user is only ever asked to verify the first, third and last words of their recovery phrase
Expected result:
The user is asked to verify 3 randomly selected words from their recovery phrase
cc @kdenhartog
The text was updated successfully, but these errors were encountered: