@box0211: Thanks for sharing. i am wondering if the transfering of the passphrase for transactions is save for such online clients?
that wallet is actually a modified version where you cannot login with your passphrase. is a spend from cold wallet type of solution.
first you create transaction then you sign it with your private key by using your phone to scan a qr code. the signing never broadcasts your private key across the internet. it just sends the encrypted version after signing.
its the closest thing to 2 factor authentication for a wallet setup. no other coin has this setup as of today.