Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Warn user about password loss during OS /app upgrade #52

Open
lpascal-ledger opened this issue Nov 10, 2023 · 3 comments
Open

Warn user about password loss during OS /app upgrade #52

lpascal-ledger opened this issue Nov 10, 2023 · 3 comments

Comments

@lpascal-ledger
Copy link
Contributor

As there are no storage resisting OS and application upgrade, currently all passwords are lost when a user upgrade it OS or the password application.
A tool exists to backup / restore them, however we should strongly highlight this, like with a disclaimer message the first time the app is started (?).

@aido
Copy link

aido commented Nov 10, 2023

Another good reason to change the app to use the BIP85 standard to generate passwords? 😄

#48

@TheWanderer1983
Copy link

TheWanderer1983 commented Nov 22, 2023

You really should do this. I've been using the ledger for a number of years now and I use the password app for my login for my computer. I was forced into upgrading the firmware in order to continue restaking my polygon and cosmos. I upgraded it and lost all my passwords. I had used the tool to backup the json a year or so ago but I couldn't remember where I put it. I use these to login to my LUKS encrypted computer. Thankfully I was able to remember the name to regenerate the computer password but it took me over 20 attempts and all day before I did.
How about a warning before you upgrade the firmware about the password app losing passwords?

@lpascal-ledger
Copy link
Contributor Author

There are some work invested in a client-side (Ledger Live) solution, which is quite larger than just a warning as the root issue is how to keep all app 'local storage' persistent across upgrades (because this issue is basically the same thing as settings being reset). But when embracing the whole system, just a warning feels a small gain for a not so trivial change (or we could argue it already exists in a very simple form, as I'm pretty sure the Ledger Live pops up a "save your data" warning before an upgrade).
But until this is fixed by system/OS design, I'd think an app disclaimer clarifying the current behavior could be an easy and not that costly step.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants