{"id":7250,"date":"2023-05-17T21:05:39","date_gmt":"2023-05-17T21:05:39","guid":{"rendered":"https:\/\/nft.runfyers.com\/index.php\/2023\/05\/17\/ledger-recover-is-your-seed-phrase-really-safe\/"},"modified":"2023-05-17T21:05:39","modified_gmt":"2023-05-17T21:05:39","slug":"ledger-recover-is-your-seed-phrase-really-safe","status":"publish","type":"post","link":"https:\/\/nft.runfyers.com\/index.php\/2023\/05\/17\/ledger-recover-is-your-seed-phrase-really-safe\/","title":{"rendered":"Ledger\u00a0Recover:\u00a0Is Your Seed Phrase\u00a0Really\u00a0Safe?"},"content":{"rendered":"

<\/p>\n

\n

The Paris-based crypto hardware wallet provider Ledger found itself in hot water this week after revealing plans to introduce Ledger Recover<\/a>, an optional, paid subscription service for Ledger Nano X wallet holders that provides a seed phrase recovery system involving third-party custodians. Ledger touted the new feature as an innovation that would allow crypto and NFT holders to recover their assets in the event of a lost or forgotten seed phrase.\u00a0<\/p>\n

But the announcement has been criticized severely by a portion of the Web3 community, who claim that the firmware update that enables the service to exist goes against Ledger\u2019s longstanding policy (and main selling point) that guarantees a user\u2019s private key will never leave the device. Such concerns have raised questions about Ledger\u2019s professed commitment to privacy and security, accusations the company denies. <\/p>\n

So, who\u2019s right? If you use a Ledger hardware wallet, is your seed phrase safe?\u00a0<\/p>\n

The Ledger controversy<\/strong><\/h2>\n

Valued at over $1 billion and with an estimated annual revenue of over $53 million<\/a>, Ledger is one of the world\u2019s most well-known and popular providers of hardware wallets. The company\u2019s hardware wallets, often referred to as \u201ccold storage\u201d devices, are USB thumb-drive-like tools that offer a highly secure way to store cryptocurrency. They are considered superior to their \u201chot wallet\u201d counterparts, such as MetaMask and WalletConnect, which are generally easier to use but have the downside of storing private keys online, exposing them to far greater risk. <\/p>\n

Setting up a Ledger wallet involves creating a unique seed phrase, a collection of randomly generated words that constitute the private keys associated with crypto wallets. This system, while secure, has usability drawbacks. Losing the seed phrase means losing access to the funds, and if it falls into the wrong hands, it could lead to wallet compromise.<\/p>\n

\n

For years, Ledger has marketed its wallets on the idea that users\u2019 assets are safe because their private keys never leave their devices<\/a>. So, it came as a surprise to many in the Web3 community when the company confirmed plans for an optional paid subscription service on Tuesday, May 16, via a Twitter video featuring Ledger CTO Charles Guillemet. <\/p>\n

In essence, Ledger Recover encrypts a user\u2019s seed phrase and shards it into three parts, each shared with a different custodian. Ledger is one of those custodians, with Coincover and EscrowTech, (a crypto custody and code escrow company, respectively) being the others.<\/p>\n

\u201cIf you choose to subscribe, Ledger Recover encrypts a version of your private key and splits it into three fragments (using Shamir Secret Sharing) \u2013 all of this happens on the Secure Element chip, so your Secret Recovery Phrase is not at risk,\u201d wrote the company in the Twitter thread accompanying the video. If a user loses or forgets their private key, they will go through an identification confirmation service to recover and restore it. <\/p>\n

The community reacts<\/h2>\n

A champion of security advertising a device that houses a completely untouchable and immovable private key and then suddenly announcing that the key actually could<\/em> be accessed and shared with third parties did not <\/em>sit well with much of the Web3 community. <\/p>\n

Similarly upsetting was the fact that, to take part in the service, users would need to provide a government-issued ID if they wished to subscribe to Ledger Recover. <\/p>\n

\n
\n
\n
\n
\n

Stop using Ledger hardware wallets. Migrate away from them immediately. They\u2019ve shown nothing but gross incompetence and wild misunderstanding of their own purpose. And now they\u2019ve publicly admitted to intentionally backdooring their own proprietary hardware. Stop using Ledger pic.twitter.com\/LLFFUsOW4y<\/a><\/p>\n

\u2014 foobar (@0xfoobar) May 16, 2023<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<\/div>\n<\/div>\n

In the midst of the backlash on Tuesday, Ledger hosted a Twitter space<\/a> (that was attended by more than 48,000 people) to address the controversy. Guillemet, company co-founder Nicolas Bacca, Chief Experience Officer Ian Rogers, and CEO Pascal Gauthier took turns fielding questions from an agitated and curious community.<\/p>\n

\u201cEach shard [is stored with] each partner,\u201d Guillemet clarified in the space. \u201cWhenever you want to recover, you go through your account, through those partners as well, and an ID identification process to make sure it\u2019s you. The two partners verify it\u2019s you, if there is any doubt, the process is stopped. There is plenty of different mitigation and measure to make sure you are the one recovering your seed.\u201d<\/p>\n

The team also made it clear that they plan to open-source the code for the service in the future, letting users see how it works and even use it to make their own version if they want. <\/p>\n

\n
\n

\u201cThis is what our future customers want. I\u2019m sorry, but the piece of paper is a thing of the past.\u201d<\/p>\n

Ledger CEO Pascal Gauthier<\/cite><\/p><\/blockquote>\n<\/figure>\n

Gauthier leaned into the company\u2019s new development in no uncertain terms. Responding to criticisms that Ledger has been proven untrustworthy<\/a> in the past and that Ledger Recover goes against the desires of the crypto community, Gauthier said, \u201cPeople that get upset with these products don\u2019t realize there are hundreds of millions of people who have many ways of backing up their seed in many ways that are very insecure.\u201d <\/p>\n

\u201cThis is what our future customers want. I\u2019m sorry, but the piece of paper is a thing of the past. There is no compromise in our security. I see people on Twitter saying they are sure this will be hacked in the next six months. Ok, well, let\u2019s see. When you have a track record of excellence, you know you can trust the next move to be very similar.\u201d<\/p>\n

Ledger Recover\u2019s true risks<\/h2>\n

The key issue surrounding the controversy is whether or not users who choose not to opt into the service will have a backdoor opened up via a firmware update to their private keys that hackers could potentially leverage. And, while Bacca did admit during the Twitter space that those who opt into the service technically open themselves up to a new attack vector, some in the Web3 community believe that those who don\u2019t subscribe to the service really don\u2019t need to worry.<\/p>\n

Those who believe skeptics are overreacting have pointed to the fact that Ledger wallets are inherently upgradable<\/a> to quell fears about their accessibility and security, as well as to provide clarity on the basics of how wallets work to begin with. Without the capability to be upgraded, hardware wallets would lose their functionality, as blockchains themselves upgrade over time, and any device interacting with the blockchain needs to be able to adapt accordingly. <\/p>\n

\n

If a Ledger were an un-upgradeable box with a private key inside, then it would need every algorithm that every blockchain will ever use already available inside the box. And if they didn’t think to include a newer algorithm, you’d have to throw it away and buy a newer model.<\/p>\n

\u2014 Haseeb \uff1e|\uff1c (@hosseeb) May 17, 2023<\/a><\/p><\/blockquote>\n

However harmless the subscription service may or may not be, it\u2019s undeniable that Ledger bears responsibility for poorly communicating the nature of its devices and services clearly throughout the years. The Ledger Recover controversy, like many before it, also brings to light the ongoing struggle faced by blockchain-centric organizations; striking a balance between user experience and upholding the core principles of the crypto community is a challenging task<\/a>. <\/p>\n

Ultimately, Gauthier believes the community will decide for themselves whether or not to continue trusting the company. <\/p>\n

\u201cIf you feel Ledger is going in the wrong direction, there are a bunch of players that are also our friends in the industry, and we\u2019re trying to build a secure space with,\u201d Gauthier said near the end of the Twitter space. \u201cI have no problem that you disagree, and you can definitely use another service. It\u2019s very easy to switch from us to someone else. Of course, I don\u2019t encourage you should do it; I think Ledger is the most secure product in the industry today.\u201d<\/p>\n<\/p><\/div>\n