You can download the new version and read more on our website. https://gingerwallet.io
Can you explain more how the 2FA works? I've read the FAQ just now and it seems the user depends on your server to obtain encryption key which used to encrypt/decrypt user's wallet files. If my understand is correct, what would happen if user lose access to their 2FA or your server isn't accessible?
Yes, that's right, the server stores an encryption key. If the 2fa server is not available, the wallet is not available. The user can reset it with the original 12 seed word and password.
This is inconvenient, but still better than someone getting the unencrypted file and keylogging the password (unfortunately we know of such a case).
I see. I only can hope those who use that feature backup their 12 seed words and password properly. Although by doing that, user would lose label on their TX or UTXO which could lead to worsening privacy.
It sounds like an implementation similar to Electrum x TrustedCoin, otherwise this makes no sense. Ginger wallet's website doesn't have a registration system.
I have no knowledge of the Electrumos method of implantation, so I have no basis for comparison. Ginger has no registration. The "user id", if you can call it that, is contained in 2fa_info.gws, a completely random sequence of bytes, generated during 2fa registration on the server side. It cannot and does not store any user information. If I want to simplify it a lot, all that happens is that the server responds to a fixed random byte sequence (clientserverid) with another one (wallet encyption key).
[/quote]
Your and Electrum 2FA works differently. Electrum 2FA refers to 2-of-3 multi-sig wallet, where user provide correct 2FA to get his TX signed. In case the user lose 2FA or TrustedCoin not available, he can use seed words which contain 2 master private keys.