[ANN] A Secure Ethereum Web Wallet (ethereumwallet.org)

[alan.d]

Dear Community,

What is this all about?

My name is Alan. Me and a small group of students are what you would call "crypto-nerds".
We are following the entire crypto scene for a very long time, and Ethereum has raised our attention a while ago.

We found that the ethereum clients (that you find out in the wild) are too geeky for the average user. So
in order to improve the mass adoption of ETH, we want to give our contribution to the community and introduce

A Secure Ethereum Web Wallet
https://ethereumwallet.org

Source Code
https://github.com/Ethereumwallet/online-wallet-hd

Your password is never sent to the server. What the server does save, it your AES encrypted wallet.
When you visit the website it would then download the encrypted wallet, and decode it locally using your password.
The decoded data at no point leaves your computer.
For an additional security measure you may export your 12 word mnemonic seed, so even if you lose your password you can recover your funds.
Also here, the mnemonic is never transmitted to the server.
This web client works just like any other offline ethereum client.






The source code is based on a fork of blockchain.info's source code for the HD wallet.
What you basically get is a Web-Wallet which is entirely is in your possession. That means that you are the only one having the private keys to your ethereum addresses.
A copy of your wallet is stored on the webserver AES-encoded with your password that also at no time is transmitted to our server.
So even when our server should get compromised, your coins are at no time in danger.

Other security features allow you to set up a Two Factor Authentication using Google Authenticator or export your wallet using a simply memorable mnemonic string.

So start your wallet now with an unlimited number of accounts (all derived using BIP0039 techniques from the mnemonic secret of your wallet)


Alpha Stadium

Please note that the software is in alpha stadium right now, yet fully functional when it comes down to sending and receiving ETH. Further versions of the software will be entirely compatible with the wallets generated by the alpha.
However, there will be bugs. And this is good!
If you like to contribute to our project, feel free to test excessively and give us feedback about possible bugs or errors.

Eye Candy

http://oi62.tinypic.com/x3cvoz.jpg

http://i60.tinypic.com/14lkjux.png

http://i57.tinypic.com/z5ap.png

http://i59.tinypic.com/wgxd79.png

[kcanup]

Why is not link working?

[cryptoboy.architect]

Email is required?!  

My recommendation is to have an option to work like https://counterwallet.io/

[favdesu]

that url gives me a security alert https in chrome. doesn't sound it's so secure like advertised though...

[favdesu]

Here's what I get in Chrome android & windows of course



it's an issue with the SSL protocol and chrome's security I guess

Edit:

[alan.d]

Indeed,
when i check https://www.sslshopper.com/ssl-checker.html#hostname=ethereumwallet.org
it tells me the following:

The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. Learn more about this error. You can fix this by following Comodo's Certificate Installation Instructions for your server platform (use these instructions for InstantSSL). Pay attention to the parts about Intermediate certificates.

Let me purchase a different SSL. I will be back to you shortly. Would you like to have a few ETH or a few mBTC as a small thank you?

[favdesu]

Indeed,
when i check https://www.sslshopper.com/ssl-checker.html#hostname=ethereumwallet.org
it tells me the following:

The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. Learn more about this error. You can fix this by following Comodo's Certificate Installation Instructions for your server platform (use these instructions for InstantSSL). Pay attention to the parts about Intermediate certificates.

Let me purchase a different SSL. I will be back to you shortly. Would you like to have a few ETH or a few mBTC as a small thank you?

yep, a new SSL should fix your problems.

I'll take some ETH: 0x9af084c559597c65417d817075c037a0cba22a29

thank you

[alan.d]

The SSL Error is fixed. Thank you again for your help.
I will send you a small bonus shortly.

[LordCoder]

I prefer client-side Javascript stuff. Online wallets are always owner's cash.

[alan.d]

I prefer client-side Javascript stuff. Online wallets are always owner's cash.

This wallet is client-side javascript stuff. The crypto (including all keys, signatures etcetera) is performed locally on your computer.
Basically the same principle blockchain.info pursues. Your funds are not stored on our server neither is any password/privatekey ever transmitted to the server.

[Yaremi]

Hi

you have a little problem

ethereumwallet.org dont work on chrome with Adblock

So if someone open the site with Adblock will be see nothing

[Yaremi]

Hi

you have a little problem

ethereumwallet.org dont work on chrome with Adblock

So if someone open the site with Adblock will be see nothing

Thank you very much for that bug.
Indeed, Adblock is blocking parts of the site.
I will fix this right away, and then I will give you a little bonus for your report  

edit:
FIXED!

Yes. Now work  For little bonus 0x4d6275326f61db36b6b57ca2121ae16a5d99c6e6

[cryptoboy.architect]

I would love to see something like warpwallet integrated.

[Yaremi]

Thank you for reporting back.
I will send a bonus shortly.

Thanks! Also https://ethereumwallet.org added to Russian ETH thread https://bitcointalk.org/index.php?topic=996518.0

mobile wallet app? its amazing

[techbytes]

Just sent some ETH from poloniex  to test and received instantly in the wallet.  GUI is a heck of a lot better then the Geth console. 


-tb-

[tradoz]

That is great and fantastic job so i have tested it, received instantly without any delay and working smoothly on my side without any error. 

[WilderX]

Can you mine ETH directly to this wallet?

[WilderX]

We would like to thank you all for your trust and your commitment.
Our GETH node has just relayed the 1000th transaction from our web wallet.

Sir, really awesome work with this wallet! All my pool mined ETH has been received to this wallet for about a week now with no issues (every single transaction). I really appreciate what you guys are doing for the ETH community!

Guys like you will take ETH to the mainstream!!

[Mickeyb]

So do I get a same level of protection with this as I would get from the GETH?

If this is a case then I see this as a much better option for average user since to make a mistake in GETH it's 10 times more easier then with this wallet. And I have already heard that many people have made costly mistakes and lost their ethers.

I guess many have already revised the sources on the github.com, I hope people can comment how they are clean.

Thanks for your work guys!

[Mickeyb]

So do I get a same level of protection with this as I would get from the GETH?

If this is a case then I see this as a much better option for average user since to make a mistake in GETH it's 10 times more easier then with this wallet. And I have already heard that many people have made costly mistakes and lost their ethers.

I guess many have already revised the sources on the github.com, I hope people can comment how they are clean.

Thanks for your work guys!

Yes, the wallet does not communicate any passwords or private keys to the server instead performs all the crypto on your computer locally.
Just the same way a locally installed GETH instance does.

The source code is based on the blockchain.info wallet so it can be assumed that it has been already penetration tested by all those who want to make a quick buck. Still, the sources are available on github for public review. So if there are any questions about parts of the code, feel free to ask.

OK great, thanks a lot to you and your friends for doing this. Need I not to say how much will this facilitate the adoption of Ethereum. This is an amazing technology but it is way to complicated for ordinary folks, even for ordinary crypto users to understand. And I wouldn't like to miss out an opportunity to be one of the early adopters because I don't feel comfortable running command lines.

This will help us all, to get our first ethers and just to store them safely.