keybase / keybase/keybase-issues
Confusion between “keybase passphrase” and “key passphrase”
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
When a key pair is generated with `keybase gen`, the following label is shown by the keybase client to prompt for a passphrase: “Your key passphrase (can be the same as your login passphrase)”. Some actions on the website (signing something, decrypting something, exporting the private key, verifying an identity) require the passphrase given at this point.
However, when it is required, it is actually the _keybase passphrase_ that the website asks for, and this can easily be confused with the login passphrase, which may be completely different.
I think it might be better to ask unambiguously for either the “login passphrase” or the “key passphrase” whenever one of them is required.
Contributor guide
No contributing guide indexed for this repository
Research direction
Review the keybase client prompt and the website actions for signing, decrypting, exporting the private key, and verifying an identity. Confirm where each passphrase is requested, then ensure the displayed wording distinguishes the login passphrase from the key passphrase.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100