Suggestion on Steemit.com Wallet
Hello Steemians,
Yesterday was a sad day for my Steemit friend @peterwrites because he has no access to carry out operation on his Steemit account. Also viewing his wallet from my phone, we discovered that 44.801 Steem Dollar (SBD) was transferred from his Steemit wallet to blocktrades without his consent.
Image Source: @vic-essien
Whoever might have done the transaction with his Steemit account must have changed his master key.
From the call conversation I had with him, he said;
Vic, I have never shared my internet enabled device with anyone and I have never logged into a third party site with my Steemit master key.
Image Source: @vic-essien
Unfortunately, I assume noting can be done to reverse this issue.
My Suggestion
The wallet of Steemit.com is of great asset to its users. Also based on how long the steemit master key looks, it is not easy to remember, many users prefers to save the master key on their browser for easier access through auto login.
From all of the above premises, I suggest that email linked security should be added to Steemit.com wallet.
Here is how this could be achieved;
- When a user clicks on wallet to view their wallet and probably carry out operations (such as SBD, Steem transactions etc) on their wallet.
Image Source: @vic-essien
OR
Image Source: @vic-essien
- The next page that appears should look something similar to the image below, where Instant Wallet Pin (IWP) will be generated to email used by respective users during Steemit.com registration.
Image Source: @vic-essien
The Instant Wallet Pin (IWP) should be programmed to expire within 15 to 20 minutes.
Users are expected to visit their email, open the Instant Wallet Pin mail, copy the pin and paste it on the Steemit.com page requesting for Instant Wallet Pin and then click continue.
If Instant Wallet Pin (IWP) is correct, users can be successfully logged into their wallet to perform their desired operation.
On the wallet page, a countdown timer (Ct) should be attached as shown in the image below. The purpose of the countdown timer is to countdown to 30 minutes where it automatically logs out the user.
Image Source: @vic-essien
If this suggestion is been implemented, it will improve the experience of Steemit.com users by;
Making their wallet 98% secured
Reducing the rate of non account owners having access to wallet of original account owners.
Thank you for visiting my blog. Please use the comment section to share your thought on this suggestion.
Posted on Utopian.io - Rewarding Open Source Contributors