Clean keycard and remove multi-account

[guylouis]

Situation

Currently, after a keycard has been set-up after onboarding the keycard has

• setup a PIN, Pairing code, PUK
• secrets loaded (which correspond to status multiaccount seed)

Problem

There is no possibility for the user to remove the secrets loaded physically from the card

A user might want to delete the secrets from his card because

• despite the high level of hardware security of his card, he wants to remove them physically from there to prevent any attack to succeed now or later
• he wants to change the multiaccount on his card

Solution

A simple approach would be

• user is logged in his keycard multiaccount
• user goes to 'settings/keycard'
• user choses 'reset keycard' (to be added, does not exist today)
• user is prompted
  "You're about to delete the keys on this card, your pairing code/PUK & PIN remain will unchanged.
  You must have your seed if you want to recover any funds from this key in the future. You can now restore another key on this card. Your Pairing code remains unchanged and will be needed if you use a new phone.
  Are you sure you want to proceed ? yes/no"
• if the user clicks 'yes' then
  - we leaves PIN, PUK, Pairing uncode untouched on the card
  - the secret on the card is deleted
  - the multiaccount is removed from the phone

[3esmit]

If user forgets Pairing code, PUK and/or PIN, it should be able to reset?

[guylouis]

given the low value ($) of the card it self we've not designed it this way ...
the user must remember his PIN (or PUK) to access his card, and he must remember his pairing if he has no phone paired

If we implement #9064 after v1, the user will be able to recover any keycard if he has his seed (and if PUK/Pairing hasn't been changed form the derived version of the seed by another app...)

[rasom]

Keycard's side of this task is already implemented, so we need to make sure that there is an API for multiacc removal.

[guylouis]

Ok Decided with @Rachel Hamlin <[email protected]> that resetting a keycard and removing its account is post v1.0 Le lun. 11 nov. 2019 à 07:40, Roman Volosovskyi <[email protected]> a écrit :

…

Keycard's side of it is already implemented <https://github.com/status-im/status-react/blob/develop/src/status_im/ui/screens/hardwallet/settings/views.cljs#L127>, so we need to make sure that there is an API for multiacc removal. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#9229>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACXOGPLSCAPRS6RAHNAXWCTQTD46VANCNFSM4JBNOV5A> .

[cammellos]

@errorists @hesterbruikman could you please have a look at the UI for this?
Thanks

[guylouis]

would be great to progress on this
@johnlea-quiup
wdyt about the UX ?

[hesterbruikman]

Wondering if this could be captured under 'Delete my profile' for consistency with regular multiaccounts. Result would be more or less this:

Figma

[guylouis]

fully agree with you @hesterbruikman

[guylouis]

So this issue #9229 is flow 6 of this figma design https://www.figma.com/file/dEIljL7UPbXgsZUA0Q4qlE5E/Onboarding?node-id=8197%3A858