If somebody forget's its password.
Can you retreive it using your Private Key you have been sent on the PDF?
Thank you
No, there is no way that you can retrieve your tezzies if you loose your password. The wallet id and the seed is not enough!!
What? Typically the see is the private key and that is all you need.
Tezos is different mate if you lose your password you lose all your coins simple.
An important reminder about passwords
Dear Tezos supporters,
The Tezos fundraiser is currently ongoing and has been a massive success so far. If you have contributed, or are planning to contribute, we would like to remind you of the importance of backing up your password.
The password you select on the fundraiser page is used to protect your key in case of theft of your paper wallet. The 15-word mnemonic you see in your wallet cannot alone let you access your XTZ allocation. We do not have your password and cannot help you recover it.
We recommend that you pick a strong password, one you haven't used anywhere else. Committing passwords to memory is difficult, therefore we strongly recommend you write it down on a piece of paper and place it in a secure location. Keep it secret, keep it safe.
As always, whenever you access the Tezos website, please type in the full address, manually, in your browser:
https://www.tezos.comSincerely,
The Tezos team
Thanks for the details, hope the PW I wrote down is the correct one! =?
good question... how to check if I have/remember/write down my correct password?
That's what i am worried now i hope i can remember the password . If any one know how to check please post it.
As a Tezos investor & InfoSec engineer, I too wanted to double-check my password and to check that their wallet generation mechanism was not flawed... So here is a secure way to do it:
1. Open
https://crowdfund.tezos.com (the only official site that you should trust) then download & open the offline version on Chrome in incognito mode (ctrl-shift-n) on an offline computer. If you don't have an offline computer, at the very least disconnect from your network. I
highly recommend to go offline. The steps below, if slightly modified, could be used to steal your wallet password+seed. If you are offline, it should be fine.
2. Open Chrome's dev console (ctrl-shift-j) and type the following command. Again make sure you are in incognito mode (if not, the dev console command history will be saved to disk and leak your passwd). Replace "x@x.x" with your email address, "testtest" with your password, "word1 word2 word3 ... word15" with your secret key):
module.getKeypair('x@x.x'+'testtest', 'word1 word2 word3 ... word15')(In general you should never type a piece of code you don't understand in the Chrome dev console. But because you are doing this offline, in incognito mode, and will close Chrome before going back online, it is safe.)
3. It should print, for example:
Object {mnemonic: "scene claim process view journey snack cement lens avoid iron dove slam game chronic hazard",
entropy: Uint8Array(40),
pkh: Uint8Array(20),
pkh_b58: "tz1YFBpy8SvFZhk91rnik1Czx5NsYEaurTn6",
verif_code: 35399}4. Verify that pkh_b58 matches your publish key hash. If it does, then your password and email were correct. That's it.
5. If you had to use an online computer temporarily disconnected from the network, then close the Chrome incognito session, and only then it is safe to reconnect to the network.
Technical details:For the curious and those who can read the js code, the module.getKeypair() function is defined in the Tezos page and simply computes a Tezos keypair from an email, password, and secret key. They use the standard BIP39 passphrase-protection mechanism to generate a seed from a 160-bit mnemonic (15 words). The BIP39 passphrase is the email address concatenated with the Tezos password. The verif_code is just the first 2 bytes of the public key hash (pkh[0] * 256 + pkh[1]).
It is possible that some people typed a random email (not willing to reveal their real email) and it seems the Tezos devs didn't think about this. IMHO they should display a big warning to explain that both the password
as well as the email need to be remembered in order to access the wallet, since the email is used to build the BIP39 passphrase.
