MetaMask / MetaMask/metamask-mobile

[Bug] Autocorrect not restricted to BIP-39 wordlist during SRP entry on mobile

Open
#17,648 0 comments 0 reactions 0 assignees View on GitHub
INVALID-ISSUE-TEMPLATE
Dominant language
TypeScript
Stars
3k
Forks
1.7k
Avg merge
1d 14h
Merged PRs (30d)
669

Description

## Issue Description:

When entering a Secret Recovery Phrase (SRP) on MetaMask Mobile, the autocorrect functionality is not constrained to the BIP-39 wordlist. As a result, autocorrect may substitute incorrect words, causing unintended errors in the SRP entry.

### Current Behavior:

* Autocorrect actively suggests and accepts words outside the official BIP-39 list during SRP entry.
* This behavior can silently introduce incorrect words, causing SRP validation to fail and frustrating the user.

### Expected Behavior:

* During SRP entry, autocorrect should either:

* Be entirely disabled, or
* Be strictly limited to suggesting words exclusively from the BIP-39 wordlist to avoid input errors.

### Steps to Reproduce:

1. Open MetaMask Mobile.
2. Navigate to the wallet import flow using SRP.
3. Begin typing SRP words.
4. Observe autocorrect suggestions and substitutions outside of the BIP-39 list.

### Environment:

* MetaMask Mobile version: 7.52.0
* OS: iOS / Android (observed across multiple devices)

### Suggested Solution:

* Disable autocorrect entirely during SRP entry fields.
* Or integrate a strict, gated autocomplete restricted to BIP-39 compliant words only.

### Additional Context:

Flagged during recent UAT session, impacting user experience significantly during wallet restoration or import.

Contributor guide

Open the contributing guide

Research direction

The issue names the wallet import flow and SRP entry fields but no files or tests. Reproduce the behavior on iOS and Android, then trace the SRP input implementation and its autocorrect configuration. Done means autocorrect cannot introduce words outside the BIP-39 wordlist during SRP entry.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, ios, react-native, typescript
Domain
mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.