steem icon indicating copy to clipboard operation
steem copied to clipboard

Create account with a different recovery account

Open Transisto opened this issue 6 years ago • 6 comments

Would need that to be able to more easily create accounts by not having to handle account recovery.

Transisto avatar Jan 26 '19 23:01 Transisto

You don't have to handle account recovery. It's just that creator is also the default recovery_account for account it created. How account recoveries are handled depends on a ToS of account creator, including not handling them at all. Accounts created by Steemit, by default has steem as recovery account, but if I create an account for someone, and they change their own recovery account to steem it doesn't change anything, because Steemit Inc has no ways to tell which recovery requests for that account are valid and which not.

Gandalf-the-Grey avatar Feb 28 '19 21:02 Gandalf-the-Grey

It would still be nice to be able to set the recovery account at creation, without a 30 day wait. A account creation service might not want to handle account recovery, so they might set the recovery partner for accounts they create to (for example) the top witness. If this can be set at account creation, then the users with new accounts will always have a willing recovery partner.

syvb avatar Feb 28 '19 21:02 syvb

I just stumbled upon same request here: #3242 Question is, if problem that it is trying to solve, couldn't be solved in a better way If bob creates account for alice and wants charlie to be her recovery partner, why not let charlie to create account for alice? Isn't "claimed accounts market" something that you are looking for instead?

Gandalf-the-Grey avatar Feb 28 '19 21:02 Gandalf-the-Grey

Also requested in https://github.com/steemit/steem/issues/3181

TimCliff avatar Mar 01 '19 01:03 TimCliff

I am still not sure if I understand the actual use case for this. Is it that you don't want to be responsible for account recoveries? Or that you want to create accounts, but then make someone else responsible?

If it is the later, are you partnering with someone that wants to do the recovery, in which case, why not have them create the account and you reimburse them for it? Or delegate SP to their faucet (with SMTs, you can delegate just the RCs). Or are you just setting some random account or other faucet as the recovery partner without informing them. It is the later I am concerned about. Users could miss out on important security features by signing up with the wrong faucet.

mvandeberg avatar Nov 19 '19 20:11 mvandeberg

From @TimCliff on #3181

If you change the recovery account, it takes 30 days before it goes into effect.

Here is the reason: assume Alice’s account is hacked. Alice needs to be able to initiate an account recovery to get her account back. If the hacker could immediately change the recovery account, then Alice would not be able to complete an account recovery.

mvandeberg avatar Nov 19 '19 21:11 mvandeberg