Keymoji:
Making normies create & remember secret keys.
https://cdn.satellite.earth/bed7cc8dbd2e0714cef59339ab5b8f12a31e009addcc7f95a21a71614a5eebd2.mov
Yes, it's a stupid idea.
Yes, it's something you would never do for a bitcoin address.
Yes, it kinda supposes key-rotation will a thing at some point.
Yes, it needs to be combined with a great "login"-flow for other apps (which I'll share this week 😉)
But,
It puts keys in the minds of normies. Literally.
(insane how fast people can remember even randomly created Keymoji's in my tests)
It doesn't hide nsecs in honepot-bunkers or behind email-looking sign up flows.
It doesn't use the English-only 12 words seed phrase.
It avoids clipboards and even if users are stupid enough to save a screenshot of the emoji's, it's only one part of the key.
The lazy way is (to let the app generate the emoji's + line for you) is the most secure way.
Think about it 🙃.
#nostrdesign
It has some flaws, but somehow I like it, it's an interesting solution; exploitation of visual memory in the UX and security is underestimated.
The first point to check is the entrophy and robustness of the generated key; 4 emoji seems really few (consider also that the full list has 1874 emoji, bip39 has 2048 words), but a password with an imposed min lenght could make the difference.
PS: I really like your attention for design's details, well done Niel.
There are 3664 emojis, no?
I checked this https://unicode-org.github.io/emoji/emoji/charts-15.0/emoji-list.html and it seems updated to unicode v15.1. Where do you count 3664?
Btw, some emojis have just a slight difference, e.g. color, and this could make harder recall the correct one.
1. Skin color, gender etc nearly double those 1874 in the unicode list
2. It's ok if you don't recall the correct one exactly, because you have infinite tries and know what to look for
There is only 1874 base emojis? That's too few. If you cut to 1024 from that, it's 10 bits per symbol and you'd need to extend to 14 for the same bit size.
I think 2048 symbols is too many, also.
But so long as you give the set as an input panel, ok.
