Keychain Added to Steemit.com!

in #keychain5 years ago

keychain steemit.jpg

We are excited to announce that Steem Keychain is now integrated into steemit.com! That means that you can now sign into steemit.com without entering private keys into your browser. Keychain is a browser extension similar to Metamask for Ethereum that enables Steem users to store their keys and broadcast transactions to the blockchain.

Keychain gives Steem users more choice with respect to how they leverage the world's most used blockchain-powered social application: steemit.com. One of the benefits of open source software is that 3rd party developers can add features which enable users to customize their software experience to their unique needs, which is precisely why were happy to add support for this 3rd party extension to the site.

Keychain was released by the developer of SteemMonsters, @yabapmatt and is open source. You can view the github repo here.

From the Repo

The Steem Keychain extension currently includes the following features:

  • Store an unlimited number of Steem account keys, encrypted with AES
  • Easily view balances, transaction history, voting mana, and resource credits for all of your accounts
  • Send STEEM and SBD transfers right from the extension
  • Securely interact with Steem-based websites that have integrated with Steem Keychain
  • Manage transaction confirmation preferences by account and by website
  • Manage automatic lock settings to lock when the browser is closed, the device is locked, or after the browser is idle for a specified period of time

Community Contributions

At Steemit, we want to empower community developers to help improve steemit.com and steemitwallet.com. We have an amazing developer community that we have failed to fully honor in the past. We know that many of them have become disillusioned with the process of contributing to Condenser (the software that powers steemit.com and steemitwallet.com) and we want to do whatever we can to reverse that.

That’s why we were glad to merge the PR submitted by @eonwarped which added Keychain to steemit.com. We would have liked to merge this change sooner, however, we determined that it would be safer for our users to implement this change after we had split off the wallet (steemitwallet.com) from steemit.com.

Other community contributions that were merged are:

MVP: @quochuy

The majority of this batch of community pull requests were submitted by the user @quochuy making them the obvious candidate for this week’s Most Valuable Programmer ;). Steemit’s community is its “killer app” and we believe that by empowering community developers to add the features that users want to steemit.com will be critical for creating the unparalleled user experience necessary to mainstream Steem and blockchain generally. Without great contributions from community developers like @quochuy, this won’t be possible.

Special Thanks

Thanks again to @eonwarped who submitted the keychain PR (and a number of PRs that have now been merged) and the other great community developers who have submitted PRs.

The Steemit Team

Sort:  
There are 2 pages
Pages

Woohoo! Very excited to see it live. Thanks everyone that contributed to Steemit, it's really great to see.

Props to stoodkev for coding keychain.

But is keychain being used for both Posting AND the wallet? I dont see any keychain support on the steemitwallet.com page which is the whole point of having keychain....right? so I just think @steemitblog should explain why its not used on the wallet page... Or are they just not going to ad it and just leave the wallet page the same? Maybe a quick video popup about keychain would be appropriate, not all users read the @steemitblog

But hey you predicted this a few weeks ago @aggroed in PAL discord when you told me that steemit inc has the repo for keychain and just has to add it.... imagine if steemit inc had sponsored the creation of keychain.... its on e of the things they should have been helping develop, its weird how steemit inc lets the community do all the infrastructure and heavy lifting , or at least too much of it...

I appreciate the update from steemit blog When is @ned going to give us a frigin roadmap? It would be so nice to see a sort of long term marketing strategy on paper from @steemitblog I think that would help the price a lot.

Good job mate. :)

You may have convinced me. I will revisit it this weekend.

Great job @eonwarped and good to finally see community commits beeing merged into the official condenser repo!

@eonwarped Thanks a lot for this and @stoodkev too! Will keep contributing to keychain!

곰돌이가 @blockchainstudio님의 소중한 댓글에 $0.004을 보팅해서 $0.019을 살려드리고 가요. 곰돌이가 지금까지 총 4908번 $55.172을 보팅해서 $62.395을 구했습니다. @gomdory 곰도뤼~

Great stuff mate. I’m glad it got accepted.

Posted using Partiko iOS

Wow congrats to @eonwarped and all involved seems like it would be very convenient and user friendly.

You da man Eon... a true treasure for this blockchain and this community! I'm mega proud of you.

Congrats for getting the PR merged into the condenser! It was about time. :)

That is great news. SteemKeychain is a great extension that I'm using regularly. I've also submitted a PR to allow to trigger SteemKeychain when clicking on SteemConnect transfer links. Thanks @yabapmatt and @stoodkev for bringing it to life.

Most Valuable Programmer of the week?! Wow, thank you @steemitblog 😎😋. It's great that you guys have opened the development of the app to the community.

Thank you @therealwolf, @jk6276 and @blockchainstudio for the shoutout and nice words.


If you like my work, support me and cast a vote for my witness

Congrats man!
And thanks for your hard work and shoutout!

Nice job. Thank you

Keep doing this amazing job @quochuy.

Thank you.

Posted using Partiko iOS

Thanks for all your great work!

Posted using Partiko Android

This sounds potentially useful for me.
Questions...

  1. In what ways is Keychain safer than simply saving private keys in our browser the normal way?
  2. Who will potentially have access to our data saved within Keychain?

These are very important questions.

In what ways is Keychain safer than simply saving private keys in our browser the normal way?

While saving keys in the browser isn't really an issue, putting them into websites is. When you put a key into a website (or any data really) you're giving it to them and you have to trust that they don't misuse that data, either on purpose or accidentally, AND that the site doesn't get hacked. Many people have said that it doesn't matter if steemit.com gets hacked since the keys are only used on the client side, but that's not true. A hacker could modify the website code to steal the keys entered on the client side.

If you use keychain, then steemit.com or any other site never gets access to your keys. Instead they just request that the extension sign transactions with your keys on their behalf. This means that even if a site gets hacked or does something malicious they can never get your keys.

Who will potentially have access to our data saved within Keychain?

The code for keychain is open source and is available to anyone here: https://github.com/MattyIce/steem-keychain For the maximum security you can download the code straight from the repo and install it in your browser that way rather than through the chrome or firefox web stores. This ensures that even should the chrome web store account that publishes the extension get hacked and a malicious update be published, your keys would still be safe.

Thanks for the detailed response. This makes much more sense to me.

It is my understanding that the keychain extension is only compatible with desktop internet browsers. Are there plans (or is there even a benefit) for having a mobile version of keychain? If there is, I would vote for that worker proposal since it sounds like you did this basically for free.

Yes, Keychain is only for desktop browsers currently. I would love to do a mobile version and think it is very important for the Steem ecosystem but we just don't have the resources right now. I do plan to submit a worker proposal for that when/if the Steem worker proposal system goes live.

This would be fantastic!
I would love to use Partiko but they want your active key to sign in on mobile.
I simply don’t trust using my active key ever with Steem Connect on a mobile device.

Awesome! I will keep an eye out for it and certainly vote for that proposal when I see it. Thanks.

is there a way to save the password in keychain , so it will not ask it again and again everyday ? I put usually hard passwords and it's hard to remember and I don't like to entre the passoword everyday.

Would this be vulnerable to a user’s computer being hacked? If they gain access on client side then they would be able to gain access to anything their keychain can grant access to? There’s vulnerabilities at every point when there’s an exchange of sensitive information no matter what, correct?

Asking for clearer understanding of the purpose of the keychain. I thought the purpose of having the different keys was for security, if one is compromised others are still potentially safe? But if the keychain is compromised isn’t all of it unsafe?

With Keychain, malicious website code cannot steal your private keys. With Keychain, all signatures are made using the extension, which defaults to you approving every signature.

Using this model, you should never need to enter your Steem private keys into a website, which should greatly reduce the possibilities to have your keys compromised.

Re #1, I think the advantage of KeyChain is compared to single site posting key log-in is marginal, but compared to using a TTP solution like SteemConnect is massive, and Steemit Inc leading the way in implementing it is promising with respect to the potential of doing away with TTPs in the STEEM eco system all together.

It's a first step. An important first step towards a SteemConnect/SteemLogin)TTP free DApp eco system, and a first glimmer of hope after the public support for EIP that Steemit Inc hasn't completely lost all sense of direction.

Keychain is great, just wish they had a version for mobile

Magic Dice has rewarded your post with a 65% upvote. Thanks for playing Magic Dice.

You have receive an upvote. Thanks for playing moonSTEEM

Wow will have to look into it. Seems this could be very very useful especially down the road when the Steem Ecosystem has so much going on in it!
Nothing better than convenience and time saving when its safe effective and reliable!

What about STEEM listing on Coinbase?

according to last Coinbase twitter poll, or responses from users rather, when coinbase asked which coin should be added AFTER EOS was already added to coinbase pro, well Steem was the next biggest group of users on twitter representing their coin.... I am pretty sure that since Steem has no more competitors as theyve all been Added to coinbase already, Steem is going to be next....

Coinbase has EOS and a few other DPOS coins already so it should be no problem to add steem

Exodus crew have also expressed interest on twitter to add steem to exodus, it will take a clever work around for new accounts maybe will have the ability to add keys like vessel, but EOS was worked out on Exodus with a button to unstake, but not to stake... exodus with steem will also be really nice. Steem on coinbase and exodus could be bigger for steem than we realize. Coinbase SHOULD honestly be adding it next if their twitter comments are listened to and I think they are.... Maybe even bitshares on coinbase after steem imagine that...

Steemit, thank your for implementing this. Very sensible and I am impressed!

I've been using Keychain with @dlease and it's much much better than SteemConnect

Super happy to about Steemit also integrating Keychain

This will make my massive steem onboarding plan with PushBook Network lot easier

Thanks a million

well ya keychain is a great extension and steemconnect v3 now in beta mode you can check it

Thanks

I'll check it out

Kudos to @eonwarped and @quochuy!

We have an amazing developer community that we have failed to fully honor in the past. We know that many of them have become disillusioned with the process of contributing to Condenser (the software that powers steemit.com and steemitwallet.com) and we want to do whatever we can to reverse that.

I really appreciate the honesty.👍 Once we've got SPS up and running on Steem, developers have even more incentives to improve condenser.

Kudos to @stoodkev and @yabamatt

although I'd change that line from "fully honor" to "not honor at all" :D

How to use it for the first time?

Good question. I was thinking the same!

Somebody does need to do a step by step blog on it, I have no idea what it is or how to use it.

Simply install this extension for Google Chrome or Brave Browser works on both

https://chrome.google.com/webstore/detail/steem-keychain/lkcjlnjfpbikmcmbachjpdbijejflpcm?hl=en

This is an extension... when you have it installed in your browser you just click on the little Blue Keys in top right corner of your browser,

When you first see Keychain it will ask you to CREATE a password for logging in, (NOT your keys, you enter those letter by clicking the settings button, the four squares in the top right

and now the keychain app will pop up and you enter your active and posting keys and then you have a wallet built in to your browser for steem dapps like steemit steem-engine etc (Sorry the firefox addon page was taken down last i checked but im sure @yabapmatt can explain where to get if youre using Firefox)

Thank you @ackza :)
I thought you put in those keys right way :/
That is why I got apprehensive in using it.

Aggroed said in his blog to put masterpassword so ... that is why.

@cryptopie I have been using Keychain for a while, and I really love it.
I only leave my posting key in the extension, and when I need my active key I just paste it into Keychain. Then I remove it after I am finished!
I just bought steem today, powered up, and delegated and then removed my active key..... very nice! :)
I am waiting for the IOS mobile.......
I think the only downside would be if you stayed signed in ,and someone got access to your computer, but when you close your browser it logs you out.

Are you sue @aggroed saiud to put in owner key/ Theres no place to even enter your owner key in Keychain at east not that I know, it forces you to hve good pratice of using Active and Posting instead.... i know the feeling of thinking its too much work and too "risky" to handle keys liek that but itrust me ts too risky NOt to use active and posting and keep Owner key on Paper like i remember @elgeko educating me on years ago, when he first made me realize how an owner key can be kept on paper and never used, and how youc an just use active and posting

Building blocks
Keep on building!!

Great app, I hope you add a PIN code before any important action specially the sending.

@steemitblog,
@yabapmatt impact on STEEM is so real and huge! Thank you for this development and hope we could bring STEEM back to top of crypto lists in 2020 again as a community! Awaiting to use this new feature!

Cheers~

Steemitwallet can not remember language settings still!

P.S. Upvoting for visibility

Ok this is now offtopic but I have some inspiring words for steemit inc and steem

@aggroed you should be recognized more by steemit Inc but I already know @ned and you already tried working together. I wish ned would just make posts, THANKING you at least.... ... Ned has the WORLD on his shoulders and with just a LITTLE extra effort posting daily he could do SO much more than hes doing now in terms of rallying the people ..... but he just doesnt know that I guess or he doesnt see himself as that powerful? .... Maybe if we were @ned we would be under too much pressure and too afraid to make any big moves, so hes become a turtle, insulated in his shell....

But if @ned was to just come out of his shell and start spending just 1 hour a day in discord and posting on his blog, upvoting from @steem and @steemit once a week even could cause people to post on steem more in the hopes of getting that sweet sweet ned upvote.... he could inspire SO MUCH CONFIDENCE it would be like a King leading the troops himself into battle, on the ground with his soldiers.

Steem would go up so much, people would start buying again if ned was out here in the trenches, showing up on all the discords everyday even for a few mins, even to auto post and leave one comment.... i mean, if he just TALKED about these things like Keychain and Steem-engine , and USED his own platform to reach all the steemians he could rally us in such an effective way.... Ned could directly effect the price by asking steemians to post on Instagram and reddit to promote steem to other crypto users, it would inspire SO much confidence in his leadership to have him on the ground promoting steem with us on the subreddit.

And He wouldnt have to spend a dime, just a few hours of his time a day, just for a month, then he can take a break... but if he just gave us a roadmap and started working closer to the TOP steemians, it just helps to know when ned is supporting you...... it is a huge rush to get suppport from ned

I remember when @airclinic creator @nairadaddy in Nigeria got a resteem and attention from @ned it really changed their lives, and ned could be a hero to so many people in developing countries by just VISITING west Africa and south america ONCE. When ned gives stemians attention they get energized and work twice as hard! Ive seen it many times. I wish @ned knew his own power when it came to this subject

could you IMAGINE if ned just did a TELECONFERENCE and showed up in Venezuela and Nigeria/Ghana over Skype like for an hour, and really made an effort to be on screen for a big steem conference in Venezuela, West Africa? It would be so huge and inspiring for Steemians in those countries to see Ned the Steemit CEO on stage over skype, on screen, listening and making a speech to address steemians like the mayor of this internet city.... So many ways Ned himself could spend just a few hours a day, and inspire THOUSANDS of steemians to do many thousands of man hours of work for the steem blockchain.... Ned has no one else who can do these things.... we are humans and humans are simple when it comes to leaders and organizations, theres no way around Ned having to do a little more people person work.... BUT IT COULD BE SO FUN!

@ned could be having the time of his life touring the world meeting steemians and changing lives, striking up business deals with various companies in developing countries, meeting with school administrators to get steem accounts for all the students, stuff like that man, maybe thats all coming in time......

PS: I have everyone here in teh comments at $0.00 at least a 1 to 4 cent upvote :D

Well done steemit inc but we still need more developments

Cool.....

It's great to see some progress being made. I think it would be great to see a roadmap for future Condenser features and what's the best way to make feature requests?

Something like a Trello board for the upcoming changes would be great, it would also be a great asset to help determine community support behind features since you can vote there as well. Now that I think about it, a Steem based Trello clone would be amazing. Anyway, main question

What's the best way for users to make feature requests?

Probably a @utopian-io post plus a GitHub issue.

A great first step towards retirement of TTP. Hope both Steemit Inc and the KeyChain crowd will consider taking the remaining steps proposed here.

The two steps remaining (next to more DApps adopting KeyChain) are in these two proposals:

I believe implementing these three paths could rid the STEEM eco system from TTPs, and keep us safe from the real threat of the TTP getting compromised. A threat that the recent Binance hack reminded us of to take seriously.

How will it be with android?

Amazing news, very nice to have. :3

There's movement in the wire!

Great to see this addition of keychain to steemit, will make life easier. @quochuy is one of the most underrated witnesses. Everyone go vote for @quochuy.

Posted using Partiko Android

This is really awesome. Special thanks to @eonwarped for keychain integration and @quochuy for so many great works done! Also thanks for mentioning me as well :)

Excelent!
Now we need to make it work on mobile :)

Great extension, I love it.

Great to see this formally adopted by Steemit. Positive news. More please....

Posted using Partiko iOS

Now this is cool. No, this is better, this is AWESOME.

Good news, we appreciate the nice work done in these last couple of months. Hopefully it will eventually reflect on the steem price in the near future, even the slightest improvements will create confidence and confidence will attract investors, there's so much potential going on out here !

A great addition to the Steemit Blockchain and greatly appreciated Steemit Team thanks

Excellent news! Great job.

very nice, i m glad that they improve everytime. It gives more stability to @steem @steemit

This is actually a great development on the Steemit platform. I actually appreciate the effort of Steemit Inc and other steemit officials with the support of other great Steemians for their great impact on the development of the Steemit platform. I hope we experience more great development in the coming years.

Thanks for sharing this great post.

Great work guys !

Ease of access has been a big thing preventing mass adoption I feel .

I can’t wait to see how much effect keychain has on growing our community on Steemit.

Have an awesome day!

Posted using Partiko iOS

Awesome! Glad you are tapping into the developer community to improve Steemit.com. Better late then never. All these little changes really add up for a better user experience.

Awesome work everyone! One more thing to keep all our accounts protected from phishing 😊

Posted using Partiko iOS

I was in the VA Hospital over the Memorial weekend and just got home today to be back home with my family. I had talked to at least two other veterans about Steemit.com and got them interested in joining the family here; and gave them information on how to join. I'm just now hearing about this great news. I have the Keychain already and getting ready to check it out now.

Posted using Partiko Android

Awesome! Keychain is definitely an important tool for security, thanks for doing your part in supporting it! :^)

Posted using Partiko Android

Is there a mobile equivalent of a keychain in the works? I access everything from a mobile device. Keeping the keys handy is a big pain.

If @ned @steemitblog supported the Keychain project with some Upvoted, delegation and liquid steem, and even Posts promoting keychain, then @yabapmatt could work on a Mobile version of Keychain, even a mobile version for the firefox addon since mobile firefox has mobile addons, but I think a separate app will be the key.... @ned @steemitblog @steem @steemit @alpha @ben just has to help promote Keychain and via upvotes they can do it for free and give yabapmatt thousands of dollars a day, or week, in upvotes, and thats a start. Im sure other whales would join in

Keychain is like our metamask or scatter, and its so crucial to get a mobile version because Steemit Inc could use it as their flagship mobile app, it would be kind of like how block.one is building out the EOS infrastructure with their newly released authenticator app. Steem still has a lot to build on, so much potential, we just desperately need steemit inc to act as a massive incubator for steem dapps and infrastructure development especially something liek keychain for mobile...

Congratulations to the Steemit Inc team for the the developments on Steemit. Kudos!

Just a heads up - can't login on steemit now (using the old method).

edit: fixed :)

Great implementation steemit team and this is going to make the user's overall experience even better and secure. Superb work done by the team.

Posted using Partiko Android

Amazing news! Once keychain was ported to Firefox, I had no reason anymore not to use it. It's a great extension!

@steemitblog the world's most used blockchain-powered application

I LIKE THAT

that sounds really good, just shout it louder in more directions if you can lol, that's a real nice pitch (AND true ...)

ganbarrei

akshully, seeing the amount of wear and tear on my mousewheel from finding my reply to add something shows you seem to be getting

more reactions again ... it might the slight bump in price but i prefer to believe it's the increased engagement

Awesome news!! Very nice to see this finally! 👍👍

There are 2 pages
Pages