Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add key management best practices documentation #357

Open
onetechnical opened this issue Apr 7, 2021 · 3 comments
Open

Add key management best practices documentation #357

onetechnical opened this issue Apr 7, 2021 · 3 comments
Labels
documentation Improvements or additions to documentation

Comments

@onetechnical
Copy link
Contributor

The current state

A lot of our examples/discussion revolve around kmd/goal for account creation:

https://developer.algorand.org/docs/features/accounts/create/

This is probably not best practice for key management; we should maybe make a separate section to discuss ways to manage wallets/accounts/keys in a secure manner targeted at end users.

The proposed state

A clearer discussion of best practices/recommendations around key management. From an end user standpoint, we should guide people to safe handling of keys with an emphasis on personal security.

Could include things like:

  • how to create/manage wallets/accounts
  • how to regenerate accounts from wallets (and that imported accounts won't regenerate)
  • algokey
  • offline PC management
  • multisigs
  • key storage
  • ledger devices (can just link out to mobile wallet doc?)

Provide any additional context

It's kind of confusing to figure out how to properly manage keys right now; using goal/kmd seems like the main way to do it based on the site, and I don't think we want to recommend key management on a hot machine.

@onetechnical onetechnical added the documentation Improvements or additions to documentation label Apr 7, 2021
@icespawn
Copy link

Trying to import my Algorand account on my node using goal account import -m and my 25 words memonic seed phrase a receive and error indicating i'm not using a 25 words string; do you know the correct syntax?

@iskysun96
Copy link
Collaborator

@icespawn can you share the code you used WITHOUT your actual mnemonic seed phrase? (maybe with some random words)

@iskysun96
Copy link
Collaborator

@onetechnical

Now we describe different account creation methods and have pros and cons of using each method. Do you still think we need to improve this page? If not, will close the issue

@iskysun96 iskysun96 reopened this Jul 29, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Projects
None yet
Development

No branches or pull requests

4 participants
@onetechnical @icespawn @iskysun96 and others