BIP39 passphrase

[ilya-maltsev]

Hi,
what are you think about adding an optional advanced feature that provide some additional security to the wallet - a passphrase that protects the seed phrase?
Maybe you need help implementing this feature?

[mytonwalletorg]

Hi, what exactly do you mean?

[ilya-maltsev]

Hi, what exactly do you mean?

At the stage of creating a mnemonic phrase (of 12 or 24 words) for a new wallet or when importing a mnemonic phrase for an existing wallet, provide to user an option to specify the 25th or 13th word, which is essentially the password phrase for the mnemonic phrase, and which will also be used to generate the key pair

Read more: https://www.blockplate.com/blogs/blockplate/what-is-a-bip39-passphrase?srsltid=AfmBOoqM-z6uGy-E2KoUsEGKHTwohlA8zYO-95rZC55RCQ4UE4q4KZS3

[ilya-maltsev]

https://github.com/toncenter/tonweb-mnemonic/blob/master/src/functions/mnemonic-to-key-pair.ts#L13
This function supports a password (passphrase) in addition to the words and IMO all wallet apps currently pass an empty string
This same practice is usually done on hardware wallets. The hardware wallet only “stores” the 24 words, never the passphrase. So if somebody steals it and hacks the PIN code, still the passphrase is never stored on the device which keeps you safe

[ilya-maltsev]

In fact to implement this feature in mytonwallet needs to change https://github.com/mytonwalletorg/mytonwallet/blob/4d9d8968e9cc057f942a25e9790ae9a171cab714/src/api/chains/ton/auth.ts#L98C31-L98C74
like this:
const { publicKey } = await tonWebMnemonic.mnemonicToKeyPair(mnemonic,PASSPHRASE);
and probably a couple more pieces of code implementing the UI...

[fananinafisa-blip]