Steem Account Recovery GUI

in utopian-io •  9 months ago  (edited)

cover.png

Repository

https://github.com/CodeBull/SteemAccountRecovery

HF20 made it incredibly easy to open a new account if you have enough RC. Before this Steemit Inc was the main account creation service along with @blocktrades and @anonsteem. All of these services set their account as recovery account of the newly created or purchased account and offer recovery in case of hacking or forgetting latest password.

But if you open an account using SteemConnect or using API and now using claimed account tokens, your account will be set us recovery account of the new account. Now if owner of the new account lost its latest master password or become victim or hacking, you have to issue recovery request as you are the trustee account. There is no easy GUI for it, so I made one.

How To Use

I divided the tool for 3 specific types of users.

  1. Who need account recovery
  2. Who need to request recovery
  3. Who need to change recovery account

Account recovery is a 3 step process.

Step 1:

The person who need to recover an account should use the first form of this page to generate a password entering his/her steem username.


Screenshot from 2018-10-05 21-42-41.png

He/she should backup the password somewhere safe and send the PUBLIC OWNER KEY to the Trustee (recovery account) of their account.

Step 2:

This step is for the account Trustee (recovery account). After verifying the requestor's identity and receiving new PUBLIC OWNER KEY, Trustee should use this form to request the blockchain to enable that use to change OWNER KEY or update the authority.


Screenshot from 2018-10-05 21-48-17.png

Step 3:

After the recovery request is placed, user is now ready to recovery his or her account and should use second form of this page.


Screenshot from 2018-10-05 21-52-49.png

New Password is the password used to generate the public owner key and recent password is last known password to the user. Recent password should not be older than 30 days.

When you'll try to login with your new password, Steemit.com will ask you to change the password. Change your password and you are done.


Screenshot from 2018-10-06 19-05-46.png

Changing Recovery Account

On Steem, each account lists another account as their recovery account. The recovery account has the ability to request recovery for the account to recover. An account can change their recovery account at any time with a 30 day delay. That can be handy if one's current recovery account is not active anymore or got hacked.


Screenshot from 2018-10-05 21-59-46.png

If you are unsure about the security of the GitHub Pages hosting, please download the repository and run from your browser.

Demo

https://codebull.github.io/SteemAccountRecovery/

Technology

  • dSteem
  • jQuery

Important Commits

TODO

Currently this tool has minimal validation and UI can be improved too. In next updates I am going to focus on those.

Contributing

Feel free to fork the repository and submit your changes. If you find any bugs, please create an issue or comment below this post. I can be also reached in Discord with the same username.

GitHub Account

https://github.com/CodeBull

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  

Thank you for your contribution. It's actually a nice tool for people who have limited knowledge of coding, and they do not have to worry about opening a CLI and doing everything themselves. The only thing I am little worried is the security, how secure is to use this than the CLI?

I really liked that you have used HTML and JS and used Github Pages for the deployment.


Your contribution has been evaluated according to Utopian policies and guidelines, as well as a predefined set of questions pertaining to the category.

To view those questions and the relevant answers related to your post, click here.


Need help? Write a ticket on https://support.utopian.io/.
Chat with us on Discord.
[utopian-moderator]

·

Hey,

Security is a concern because private keys are involved. I have used HTML and JS, so that people can just download it and run from their computer. Also many understand HTML and JS (at least a little), so that they know there is no snooping going on.

Hopefully this will help many.

Thank you for taking time in reviewing the contribution. :)

·

Thank you for your review, @codingdefined!

So far this week you've reviewed 9 contributions. Keep up the good work!

This tool looks amazingly simple to use! This is awesome! There needs to be more tools like this so we don't have to use CLI for everything (steemconnect has done this very well as well, but still makes it a little to user unfriendly).

Awesome job!

·

I tried to make it as easy as possible for a regular user. As we onboard many new users this is very much needed.

Thank you for commenting. :)

Thanks a lot for this tool! It was much needed.
I've lost the password for an account I had created using SteemConnect. I'll try to recover that account using your tool tomorrow. Let's see if it works 😊

·

Thanks. To recover an account, you need to have at lease one of the old passwords and that should not be older than 30 days.

·
·
  ·  9 months ago (edited)

OIC! Unfortunately I don't have any password (its password was never changed) though the account was created just before the HF-20.

Hi @reazuliqbal!

Your post has been upvoted by @bdcommunity.

You can support us by following our curation trail or by delegating SP to us.

20 SP, 50 SP, 100 SP, 300 SP, 500 SP, 1000 SP.

If you are not actively voting for Steem Witnesses, please set us as your voting proxy.

Feel free to join BDCommunity Discord Server.

Great Job!

If i understand this, you could make an account that you will rarely use, and then hide its keys in cold storage or some such...

and then set it as the recovery account for your main account?

In case anyone actually hacked your main account?

·

You can change recovery account anytime with a 30 days delay.

·

Yes, by default your recovery account is @steem, and if you signed up with steemit, they will allow you to recover your account using the email you signed up with plus your password within 30 days.

This seems like an important tool as we make more new accounts

·

Yes. I am hoping it will be useful to many.

Hi @reazuliqbal!

Your post was upvoted by @steem-ua, new Steem dApp, using UserAuthority for algorithmic post curation!
Your post is eligible for our upvote, thanks to our collaboration with @utopian-io!
Feel free to join our @steem-ua Discord server

Hey, @reazuliqbal!

Thanks for contributing on Utopian.
We’re already looking forward to your next contribution!

Get higher incentives and support Utopian.io!
Simply set @utopian.pay as a 5% (or higher) payout beneficiary on your contribution post (via SteemPlus or Steeditor).

Want to chat? Join us on Discord https://discord.gg/h52nFrV.

Vote for Utopian Witness!

Heya, the demo for changing recovery account doesn't work, I think it is because dSteem is being deprecated in favour of rhive?

·

Thank you for reporting. Newest version of dSteem browser version has errors. I have downgraded to 0.10.1 and it should be working now.

·
·

Awesome I confirm it works