Agreeing with @dkbit98, security/secret questions are ineffective as they tend to be easier to uncover.
One, the questions can be as basic as something ppl can get thru your social networking account e.g. which high school did you go to?
Two, the questions can be seen as trivial hence ppl feel less threat in answering them and makes social engineering easier.
Three, seeing the question narrows down which words to try
Security wise, it's better to remove this feature and just stick with the mnemonic seed being the only way to access the wallet if password is forgotten.
Topic: Oxis Wallet (Read 103 times)
A web wallet that doesn't emphasize users to back up their mnemonic codes but does emphasize email address registration and verification?
What happens when users wake up one day and the wallet service is no more?
How will users who had no idea how to back up their accounts access their funds?
I think a mandatory backup before using the wallet should be put in place. In fact, it should be done right after signing up and information should be clear about the importance of backing up the mnemonic codes.
I had to dig so dip to uncover the mnemonic code. If it wasn't for the other member commenting about your wallet giving the users seeds, I wouldn't have known that it was possible to back up the wallet.
What happens when users wake up one day and the wallet service is no more?
How will users who had no idea how to back up their accounts access their funds?
I think a mandatory backup before using the wallet should be put in place. In fact, it should be done right after signing up and information should be clear about the importance of backing up the mnemonic codes.
I had to dig so dip to uncover the mnemonic code. If it wasn't for the other member commenting about your wallet giving the users seeds, I wouldn't have known that it was possible to back up the wallet.
Feedback is appreciated.
It appears that there's no way to alter our "secure passwords" once we've set them...- You might want to consider allowing users to alter those questions and answers from time to time.
Quote from: https://www.oxis.com/#comparador
Oxis' prices to exchange cryptocurrencies are unbeatable. simple as that.
Quote from: https://www.oxis.com/faq
You can exchange between any of our supported cryptocurrencies with the lowest transaction fees and spreads in the market.
Am I correct to assume that's how you manage to offer the best exchange rates among other non-custodial wallets [by using low fees]?- Btw, I didn't like seeing those minimum and maximum requirements for exchanging cryptocurrencies.
I don't think having 3 secret questions is a good way for recovering password in case you forgot it, and this can potentially be abused and be security nightmare.
Even in Bitcointalk forum we have this option but using it is not recommended because someone could guess your secret answer, and humans are bad in keeping secrets and making random stuff.
Even in Bitcointalk forum we have this option but using it is not recommended because someone could guess your secret answer, and humans are bad in keeping secrets and making random stuff.
Quote
Secret Question:
To help retrieve your password, enter a question here with an answer that only you know. Using this feature is not recommended. Anyone who guesses your secret answer will have access to your account. It's like a second password.
To help retrieve your password, enter a question here with an answer that only you know. Using this feature is not recommended. Anyone who guesses your secret answer will have access to your account. It's like a second password.
The site loads slowly when I've visited for the first time but when I've tried it again, it's so quick. And why people has to register with email and not just give recovery phrases or seeds upon visit to your wallet?
When did oxis started to validate and provide the information that appears on your website about the total amount of assets managed? It's like you're the same as magnumwallet but they're no longer operational.
When did oxis started to validate and provide the information that appears on your website about the total amount of assets managed? It's like you're the same as magnumwallet but they're no longer operational.
I understand that you're giving the users their seeds but why do you need the email for when it comes to the recovery process? That defeats the whole purpose of non-custodial wallets...
Also, I kept getting a captcha-related error when I tried to make an account until I disabled my Adblock, you may want to look into that.
Also, I kept getting a captcha-related error when I tried to make an account until I disabled my Adblock, you may want to look into that.
Oxis.com is a Non-Custodial, Multi-Coin Wallet that also allows users to swap between coins/tokens. No KYC is needed to swap between cryptocurrency.
Fiat On-Ramping is also available.
Let me know if you have any questions.
Feedback is appreciated.
Fiat On-Ramping is also available.
Let me know if you have any questions.
Feedback is appreciated.
Jump to: