Skip to content

[feature] generate recovery code

Anike requested to merge (removed):generate-recovery-code into master

As part of the Account Recovery feature, we need to generate a random code to be used for recovery.

Related with https://github.com/pixelated/pixelated-user-agent/issues/1012. With @tayane.

Questions:

  • We are not sure how to determine the length of the recovery code. We discussed having a 32 char long recovery code, based on security levels and entropy for Shamir's Secret Sharing Scheme. But, this means a really long code for the user to type in. So, any suggestions? What is best from the leap perspective?

Still to be implemented (will come in future MRs):

  • Encrypt secret with recovery code
  • Save new encrypted secret in secrets doc

Merge request reports