iCloud Keychain for Zashi

Hi Zashi team,

Have you guys considered providing iCloud Keychain as an option for storing seed phrase? It’s end-to-end encrypted so no one can see it except the user.

It avoids having a panic attack when their iPhone is lost.

1 Like

I believe that the Zashi team has considered this and there are many technical wrinkles that are not trivial to solve in a way that this a really reliable solution. iCloud keychain is designed for passwords mostly, meaning that you can fall back to an alternative method to recover, change or revoke your password which is not the case for Seed Phrases.

Although! @ZCG has funded a grant on MFKDF that allow Passkeys to be used to derive your wallet keys which is a better suite method and a first-class citizen of Apple’s secure enclave and iCloud keychain.

2 Likes

Passkeys are great too. I have seen Coinbase & Ethereum wallets use them. One big concern for Passkeys, it is so easy to get deleted as Apple makes them visible in settings. However, non-passwords in Keychain is not searchable on iPhone.

2 Likes

These features are particularly valuable for users who don’t rely on a hardware wallet. I’ve seen countless people lose access to their crypto assets after upgrading to a new iPhone, only to discover their keys or wallets are gone, often due to sync issues or incomplete backups.

A useful trick when using iCloud Keychain is to store keys under names that are distinct from those in your local Keychain. This ensures that even if your iCloud Keychain is wiped out due to an iCloud glitch or reset, your local Keychain remains intact and doesn’t automatically sync (or overwrite) data to the cloud.

1 Like

im very much looking to see some sort of passkeys support in Zcash wallets before i can fully start onboarding super normies into Zcash, cause wen i used to onboard ppl in the past with seed phrases 9/10 times they lost access to the wallets long term. :grimacing:

1 Like

Like @pacu said, storing the bare seed phrase to the iCloud keychain is definitely not a good idea for plenty of reasons. There are certain ways a seed could be accessed even though the iCloud keychain itself is (Do you trust Apple?) end-to-end encrypted. It would require to implement some additional encryption mechanisms - a user’s passcode/word at least. That unfortunately creates another UX friction..

4 Likes

100% :slight_smile: Yes. That’s the common approach. Double Encryption with a password