Behind the scenes, the login process actually consists of two steps. How Are Passwords Used?įrom the user’s point of view, passwords serve a single purpose: to log in to user accounts from a fresh device. This paper goes over exactly how passwords are used by Wickr and explains how we help minimize these risks. However, if not designed and implemented correctly, it also may create potential new vulnerabilities. It also means that the security of these accounts does rely on the security of an external system - think an email provider or a phone network. On the positive side, this means that users can create completely anonymous accounts not tied to any external identifying information (especially when using Wickr via an anonymizing service like Tor). To this end, presently, access to Wickr accounts is protected using passwords. However, when departing from a model where accounts are bound to verifiable external identities - such as, say, a phone number, email address, Facebook account we must address the question of how access to Wickr accounts can be restricted to their owners. This is even more critical when Wickr’s goal is to allow users to access their accounts from multiple devices. This plays a particularly important role in providing users with a platform for both end-to-end secure and anonymous communication (Wickr Me). Finally, I’ll address the potential threats password use exposes us to and what Wickr does to mitigate those threats.Īuthor: Joël Alwen, Wickr Cryptography Why Passwords?Ī central privacy feature of Wickr is its ability to support accounts identified by arbitrary usernames. Next, I’ll describe how exactly how they are used. First, I’ll explain why Wickr has opted to use passwords. Have you managed to create an account after this article? If so, what was the issue? Have you waited for some time before trying again? Leave all your thoughts and comments in the section at the bottom of the page.The Wickr platform is built around two types of secrets: cryptographic keys and passwords. If you still can’t make progress, you can only wait until the system loosens. Make sure to thoroughly read all the above possibilities and see if you’ve done everything properly.
If you can’t register an account at the present time it doesn’t mean that you’ll never have your Wickr account. None of the above issues is any reason to worry. If nothing above works, then you have to be patient and try again at a later time. So type in a new, more distinctive name and try again.Īlso, when there’s a traffic overload, there’s a chance that you can’t create a new account. Therefore, if you get an error message saying that your account has been suspended (for example), it may actually mean that the username is already taken. Such was the bug that caused some devices to display a generic error message when users tried to set up an account.
0 kommentar(er)
