You do not send your private key anywhere, but all of the nodes and miners can use cryptography to quickly and easily verify you have the authorization to send that transaction. Again, fancy math and code.
If you’ve used the internet, you’re familiar with the idea of logging into a site or application with a username (or email address) and password. You may additionally provide a 2FA code.
When you do this you send your email and password to the central server; that server checks whether it is valid (the same as the information they have stored on their server), and either grants you access or denies you access.
Because the methods used for traditional authentication via a central server are fundamentally different than the method used to authenticate a transaction on the , there are some key differences you should be aware of:
You don’t need a username and a password, just the single private key.
When sending your ether, you’re not required to have both the public and private keys. All you need is a private key to gain access to a . This creates additional risk, as a scammer or phishing site only needs to obtain that one piece of information to ruin your day/month/year/life.
There’s no “forgot password” button.
If you ever lose your private key, there’s nothing that can be done. Because your private keys are not stored on a central server (like your username + passwords traditionally are), there is no one to recover it for you. If you lose it, it’s gone and your assets are forever unrecoverable.
There’s no two-factor authentication.
If someone gains access to your private key, the only thing you can do is hope you’re faster at moving assets than they are. There’s no 2FA to ensure that your key is behind another layer of protection. If you lose it, you lose it.
There’s no insurance if you do screw up. No reversing transactions.
This is true for all of , but it highlights the significance of keeping your keys safe (and not typing/pasting them into a browser). If someone gets a hold of your private key and sends your funds elsewhere, there’s nothing you can do.
There is no way to change your private key.
Because all the nodes and miners all across the entire world have to play by the same cryptographic rules, there is no way to change your private key to prevent further loss once your account is compromised.
What should we do about it?
A personal note from Taylor:
When we first started building MyEtherWallet, I didn’t realize how dangerous it was to encourage people to use their private keys on a website. I figured if we were trustworthy and we never sent the private keys anywhere, then it would be safe.
That was shortsighted, stupid, ignorant, harmful and we can never go back in time to change the decisions we made in early 2015.
Regardless of all the good, we are responsible for not only encouraging our users to engage in a terrible practice, but also encouraging other developers, products, and companies to follow our lead. This has resulted in more loss than I can comprehend.
According to our stats at , over 40,000 ETH has been sent to addresses that are flagged as being affiliated with scams orphishing sites. Those are just the ones targeting individuals — that doesn’t include attacks on exchanges and companies.
No amount of education, 10-page onboarding pop-ups, checkboxes, screaming, nor stomping our feet will prevent users from taking the easiest path. If you allow them to use their private key, they will use their private key, and everyone will lose.
This community deserves better and those who encourage this practice at this point in time, with all we have learned, myself included, should be called out and chastised for their decision.
I feel this way partially because I wish someone had educated my ass earlier about the risks and what I was encouraging. My naivety was the cause of this decision. I failed to realize that entering private keys on websites trains users that it’s okay to enter their keys on websites. It also makes you a huge target for phishers, scammers, and hackers. Even s.
Last year, we on . For those who still want to use their private key in a more secure environment, we’ve made available the downloadable .
This was a hard decision as it added friction to people’s experience and removed core functionality from our most-used product. However, the data and stories from people who had lost their funds made it clear that the benefits would outweigh the cost.
We hope that those building products in this space learn from our mistakes, take action to prevent further loss, and stop encouraging bad practices.
Recommended Methods of Keeping Yourself Secure
Talk To Us & Share Your Thoughts
Published at Tue, 16 Apr 2019 17:14:48 +0000
