2

I am trying to create an exodus like wallet, where for the first time user just need to enter the password to register on wallet.
The method I thought, running PBKDF2 on the password with empty salt and using that as an entropy for entropyToMnemonic() from bip39, which I found here.
But the problem with this method is when two users will have same password then the mnemonic will be same.
How can I get uniqueness using this method. Something like how metamask manages the wallet.

2 Answers 2

3

Entropy implies randomness.

Using deterministic algorithms on a password is not entropy and SHOULD NOT be used!

I would recommend researching how to gather entropic data from whatever programming language you're using.

1
  • Yeah I know entropy should be completely random, but as the password will only belong to the user, I guess there shouldn't be any issue. And again with this method somehow I need some uniqueness such that two same passwords on different systems doesn't generate same entropy. Commented Feb 22, 2019 at 18:15
0

To the entropy from the user's password, you need to add the time and date of the password creation, as well as any geolocation. In this case, the entropy will be more universal.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.