Hi, Bernard.

I am Gleb, one of the founders of the lobstr.co

First of all, I'm terribly sorry to hear about your troubles while using our wallet.

Our team is looking into the issue which you've described in your review of the stellar wallets, and we will definitely take some actions to notify users more clearly about the consequences of resetting password and actions needed to ensure safety more clearly.

Let me clarify:

We don't have access to your secret key - it is securely stored inside our platform encrypted.
Your password is taking part in the process of encryption/decryption of your secret key.
(Obviously, we don't store passwords in raw format as well.)

We've implemented the logic that allow users to restore their secret keys in case of password loss, using a special passphrase, which is called "Recovery Code".
During the registration process, the system shows a message, asking to securely store the recovery code on your side, as it can be used to restore access to your secret key in case of lost password.

Here is the screenshot of this prompt:
https://www.dropbox.com/s/qbt7sy67kimj7js/Screenshot%202016-07-06%2016.26.48.png?dl=0

Lobstr allows you to easily email it to your inbox.
Our records show, that you haven't requested Lobstr to email the secret key, and you probably haven't wrote it down manually.

During "Reset Password" you can see the option to enter recovery code - it will allow you to get access to your secret key and completely restore your existing account.
Please, see the screenshot:

https://www.dropbox.com/s/n4bdl0guxjljdpm/2016-07-05%2021-40-35.png?dl=0

We see recovery code as a helper tool, for the rare cases when user forgets his password. Of course, since we are talking about money and their safety, users have to be careful with storing passwords and credentials.
It never hurts to manually securely save the secret code and account address if you plan to store funds in cryptocurrency wallet.

We will review the flow and will try to emphasize importance of security measures.
We will be happy if you'll give https://lobstr.co/ another try at some point later.

Thank you for the feedback,
Lobstr team.

    Hi Gleb,

    I updated the text to point to your response.

    Maybe just make the message more explicit that without the Recovery Code you will loose access to the account after the password reset. I just created a new account and the prompt to save the recovery code is well written and clear. The problem is when you can't log in to your account, you may do the password reset in a hurry and not pay attention or remember that you actually saved a recovery code when opening the account few months ago.

    I think I printed the recovery code out now that you mention it. I will check my papers when I get home.

    Lobstr looks really nice, I like the design. I also noticed that the last 2-3 transactions don't show up in my history. Is this related to not having a secret key anymore attached to the account?

    2 months later

    I can't recover my Stellar wallet's username and password by my email and recovery code. What should I do?

      5 days later

      stellaruser What wallet are you using? Do you get any error message? Where does the recovery process fail?

        3 months later
        bkolobara unstickied the discussion .
        2 months later

        chainhead sure. You can create and sign a transaction on the offline machine (it also works on Raspberry Pi with no hardware network interface) and then transfer the transaction blob to online machine to submit it to the network.

            2 months later

            pitsevich Hello. Recently I started an account with Lobstr.co and joins him. But now the problem is when to send their lumens to another account. How to send lumens of Lobstr wallet to another account ??

                GOzD Sending Lumens with lobstr should be straightforward. There should be a menu entry with send. What issues exactly do you have?

                    I put an address to send and the amount, as required by the instructions, but is not sending. And the total amount in the purse remains the same. There you can enter any address to send? I introduced to send the address to Poloniex is a few numbers, but there is no result, it does not send any where.

                      GOzD I think you are entering the memo.id as the address. You need to click a little show address link to see the Poloniex deposit address. The address starts with a G And is a super long text. Something like:

                      In this case GCG... is the address. But all deposits have the same address and you need to enter the memo.id to differentiate yourself from other people depositing (it is written where I put the blue rectangle).

                      My android lobstr wallet only offers me a message field and I don't think this is the memo.id (maybe memo.text?). I would first create an account at:
                      https://www.stellar.org/account-viewer/
                      Send everything there and then send everything from there with the right memo type (memo.id) to Poloniex.

                        Thank you. You're right, I have not looked at the address and enter only memo.id, I did not study it carefully. Soon I will have more time, what would understand.

                        11 days later

                        pitsevich
                        Hey there, I am a new user of Lobstr.co but can not create an account. It has been for days that i tried. I always get the error that there are technical problems when i want to create a new wallet. I can login but not create a wallet. Any ideas? Really just server problems and i should wait or did i do something wrong? Thanks in advance.