trezor-firmware
trezor-firmware copied to clipboard
Dry-run recovery should display words on screen
Dry-run recovery should display words on screen to prevent malware lying to device about used words.
It's probably easier if we always display words on screen for recovery.
Unrelated: dry-run recovery should skip the question "Do you really want to recover the device?" - it is confusing and not necessary.
Suggestion: dry run recovery should force the advanced/matrix recovery method.
Reasoning:
-
Dry run method is easy and non-destructive to use, making it easy for a user to accidentally compromise their seed. In other words, they might be less careful during dry run than during actual recovery process.
-
Point one is especially exacerbated by the fact that many users accidentally enter their recovery seed in its order, instead of out-of-order as suggested by the screen.
-
This is a wonderful opportunity to show users how advanced recovery works. The dry run process is not as stressful as recovery, therefore users will be less averse to new input methods.
We have on device dry runs for both T1 and TT. Can be closed?
This issue is about dry-run recovery on T1. I assume that @slush0 meant that the Trezor should display the word that the user entered, which it does not do. It just shows:

I agree with @jhoenicke that this should not be limited to dry-run, but should apply to recovery always.
Ahh, ok, misunderstood that, sorry.