Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The app does not advertise it supports the recovery and backup passphrase #2478

Closed
davidegirardi opened this issue Mar 1, 2024 · 4 comments
Labels
A-E2EE T-Enhancement New features, changes in functionality, performance boosts, user-facing improvements

Comments

@davidegirardi
Copy link

Your use case

What would you like to do?

Verify a new session or enable the chat backup by typing in the passphrase that is much easier to type than 48 random characters. The app asks for the 48-characters key but it already supports the passphrase. If you type it, it will work both for cross-signing and to setup the secure backup.

I think it's worth making it obvious.

How would you like to achieve it?

By updating the "enter your recovery key" screen.

I think by showing users that we are "Setting up the chat encryption" and/or "Setting up the secure backup", and tell them to "Enter your passphrase or the equivalent 48 character code". This proposal probably needs some coordination with regards to the first time user experience (FTUE) so users know that the passphrase and key are equivalent.

Have you considered any alternatives?

Do not ask for the recovery key at all, only the passphrase.

Additional context

No response

Are you willing to provide a PR?

No

@davidegirardi davidegirardi added the T-Enhancement New features, changes in functionality, performance boosts, user-facing improvements label Mar 1, 2024
@davidegirardi davidegirardi changed the title The app does not advertise it support the recovery and backup passphrase The app does not advertise it supports the recovery and backup passphrase Mar 1, 2024
@bmarty
Copy link
Member

bmarty commented Mar 15, 2024

This is @pmaier1 decision (IIRC, sorry if I'm wrong) to give priority on recovery key, in order to simplify the crypto. Actually I believe that we consider that even if passphrase can be easy to remember, user may forget it. Recovery key has to be stored somewhere, since it's not possible for common mortals to memorize it. I already rise the concern internally FWIW, i.e. people who made the effort to remember the passphrase may feel stuck on this screen.

@bmarty bmarty added the A-E2EE label Mar 15, 2024
@davidegirardi
Copy link
Author

I think remembering the passphrase is unlikely in most cases. The passphrase is just simpler to type.

@pmaier1
Copy link

pmaier1 commented Apr 8, 2024

See element-hq/element-x-ios#2217.

@pmaier1
Copy link

pmaier1 commented Apr 25, 2024

This is done on EIX/EAX, thanks!

@pmaier1 pmaier1 closed this as completed Apr 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-E2EE T-Enhancement New features, changes in functionality, performance boosts, user-facing improvements
Projects
None yet
Development

No branches or pull requests

3 participants