Stellar Authenticator is a web app that secure private keys by storing them locally in an encrypted database. It has been built as a software equivalent of hardware wallets: it receives transactions request from external services using cosmic links, ask for confirmation and sign/send them to the network.
Obviously it can't be as secure as an hardware wallet, however everything is made to have it as robust as possible. Minimizing the scope to what is really needed allow to reduce the codebase size. Stripping the dependency to maximum. Implementing the secure database carefully. Studying every detail. Double-checking everything.
This is meaningfull because not everybody can buy an hardware wallet. However, most people got a smartphone nowaday. The application have been optimized so it can run on the slowest devices.
URL: https://stellar-authenticator.org
GitHub: https://github.com/MisterTicot/stellar-authenticator
Changelog since alpha release
The application have been rewritten in JS6 for easier development. Then those improvement have been made:
- Support for multi-operations transaction
- Support for multi-signatures transaction/accounts
- The user can now install the application on smartphone (this is offered after a short use time)
- The application stay consistent over multiple tabs (when login/logout/add-remove users)
- Stellar Guard full support
- Guest mode
- Secure database entirely rewritten
- It's now possible to change password / make backup
- HTML routines rewritten for efficiency & consistency
- Compatibility with latest web standards (in particular Progressive Web App)
- IE support from version 9 to 11
- Better support of very small and very large screens
- The visual design have been re-worked
To be done before stable release (this autumn)
- Implement secure cloud syncing
- Implement printed backups / encrypted paper wallets
- Release the secure database as a standalone npm package
- Integration with external services (login with Stellar Authenticator)
- Make it easy to download & run the application locally
- Anti-phishing protection
Those change will be implemented through next cosmic-lib updates:
- Support for SEP-0007
- Support for DKIF
- Support for Ledger Wallet
This is going to be implemented with stellar-oc-multisig:
- On-chain signature/transaction sharing for multi-sig accounts & smart contracts
