keybase / keybase/keybase-issues

Confusion between “keybase passphrase” and “key passphrase”

Open
#876 13 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

When a key pair is generated with `keybase gen`, the following label is shown by the keybase client to prompt for a passphrase: “Your key passphrase (can be the same as your login passphrase)”. Some actions on the website (signing something, decrypting something, exporting the private key, verifying an identity) require the passphrase given at this point.

However, when it is required, it is actually the _keybase passphrase_ that the website asks for, and this can easily be confused with the login passphrase, which may be completely different.

I think it might be better to ask unambiguously for either the “login passphrase” or the “key passphrase” whenever one of them is required.

Contributor guide

No contributing guide indexed for this repository

Research direction

Review the keybase client prompt and the website actions for signing, decrypting, exporting the private key, and verifying an identity. Confirm where each passphrase is requested, then ensure the displayed wording distinguishes the login passphrase from the key passphrase.

Written by the indexing model from the issue text.

Assessment

Domain
authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.