Portis wallet

[figmentofmyass]

i was looking at shapeshift now that they support no-KYC DEX trading.

if you don't have a hardware wallet, the only option is to use portis, a browser-based wallet owned by shapeshift. it looks kinda like metamask. https://www.portis.io/

has anyone used it? can anyone comment on potential security issues? i don't have a hardware wallet and i'm wondering how secure this would be on an iOS or PC browser.

[BitMaxz]

I never heard of this and never used this before but it seems a legit non-custodial wallet for the browser.
It's not popular as Metamask but some users here mention this wallet.

So I would say that this is a safe wallet just make sure to use it with a firefox browser instead of chrome.

[sheenshane]

has anyone used it? can anyone comment on potential security issues? i don't have a hardware wallet and i'm wondering how secure this would be on an iOS or PC browser.

I also didn't hear this wallet and due to curiosity, I have a bit of research and it seems they are very active on their social media platforms.  You can probably visit regularly and seek new announcements regarding the progress and improvement of the wallet.

• Twitter
• Github
• Telegram

I didn't use this wallet, I just share what I have found the information towards them.  Here in the forum, there's a scam attempt targeting this Portis wallet extension..  So be careful of using this wallet.

[Bitcoin_Arena]

I have seen a number of Dapp platforms that use it to connect to the Ethereum Network along side those popular wallets such as Mycrpto Wallet, Metamask, Formatic etc so I think it can be trusted.

The difference between it and Metamask is that you have to create and log into it using an email address and password.

[SFR10]

a browser-based wallet owned by shapeshift.
~Snipped~
i'm wondering how secure this would be on an iOS or PC browser.

I won't go into too many details, but that mainly depends on how secure your device is and the fact that it only requires an email and a password, it places itself in a vulnerable position.
^{- I wouldn't use it for a significant amount.}

[figmentofmyass]

so the risks are essentially the same as a web wallet like btc.com or blockchain.com? when you add 2fa and compare to a centralized exchange account, that's not bad.

I won't go into too many details, but that mainly depends on how secure your device is and the fact that it only requires an email and a password, it places itself in a vulnerable position.
^{- I wouldn't use it for a significant amount.}

after creating a wallet, you can add 2fa via google authenticator.

The difference between it and Metamask is that you have to create and log into it using an email address and password.

i just tested this---you don't need to actually use a real email address. it just functions as a login.

[Bitcoin_Arena]

so the risks are essentially the same as a web wallet like btc.com or blockchain.com? when you add 2fa and compare to a centralized exchange account, that's not bad.

Blockchain.com would be the best match since I am familiar with it too (I don't know why I had to even compare it to metamask  ). The only difference is Portis can easily interact with Dapps through the Web browser, something Blockchain.com can't do.

i just tested this---you don't need to actually use a real email address. it just functions as a login.

You actually need the email address to be real because when you first attempt to sign up, there is a message that's sent to the email address for verification. You can still sign in minus verification but sometimes if you sign in from a different browser or device, the sign in could be flagged as suspicious and a verification message would be sent to your email address as I have experienced it before. Without a real email address, you won't be able to access your account (if you didn't back up your recovery phrase)

You also need your email address and Backup recovery phrase to reset your password in case you have forgotten it.

[joniboini]

Without a real email address, you won't be able to access your account (if you didn't back up your recovery phrase)

So does this mean they store your seed too? Or they use a hash to protect it using the password?

I know Portis because one of a developer that I know use it for their apps, but didn't know they offer something like this. I thought it would be fully offline.

[Potato Chips]

Without a real email address, you won't be able to access your account (if you didn't back up your recovery phrase)

So does this mean they store your seed too? Or they use a hash to protect it using the password?

Looks like it works similarly to blockchain.com where they store the encrypted wallet file in their servers so users are able to access their wallet with just an email and password using a browser in any device, while also giving them a discounted non-custodial experience. Discounted because of the unknown part of how those wallet files are being kept and that encrypted or not, it's a lot better to not have your keys lying around somewhere.

Who keeps the private keys?

When users register, they create a wallet client-side and then immediately encrypt the private key using a secret which never leaves their device. We safeguard their encrypted wallet, but they maintain absolute control over it. We designed the security architecture so that transactions can be signed in any modern browser, meaning users can enjoy a familiar and easy experience without the risk of any unauthorized activity.

[figmentofmyass]

i just tested this---you don't need to actually use a real email address. it just functions as a login.

You actually need the email address to be real because when you first attempt to sign up, there is a message that's sent to the email address for verification. You can still sign in minus verification but sometimes if you sign in from a different browser or device, the sign in could be flagged as suspicious and a verification message would be sent to your email address as I have experienced it before. Without a real email address, you won't be able to access your account (if you didn't back up your recovery phrase)

sure you can. you don't actually need a verified email for anything---it's a non-custodial wallet after all. as with any other wallet, the first thing you should do after generating it is back up the recovery phrase. as long as you have your email/password combo, you can decrypt your wallet---you shouldn't need portis' customer support for anything. worst case, you can recover your wallet from seed.

the way i see it, providing a real email and verifying it is just leaking personal data that can be used to identify you.

[SFR10]

after creating a wallet, you can add 2fa via google authenticator.

That significantly improves its security but it doesn't make it bulletproof ^{[perfectly secure]}.
They mentioned, "minimal KYC" under the "DIRECT PURCHASE" section of their homepage and only "No ID" on their FAQ page. Does anyone know what that means exactly?
^{- I've been searching with no luck.}

DIRECT PURCHASE
No Crypto? No Problem!

Grow your app and boost conversions by accepting credit and debit cards worldwide, and give your users a familiar checkout experience when signing transactions. Users can obtain and send a variety of cryptocurrencies in minutes, with minimal KYC - no need to upload any government IDs.

How will users fund their wallet?
The average user wants to purchase a relatively small amount of crypto to use your app without having to go out of their way to fund their wallet. With Portis, US residents can purchase ETH, BTC, and DAI directly with their debit card, while the rest of the world* can purchase ETH, BTC, DAI, and XDAI using their credit card. No ID verification required! Users can also make a direct purchase where they pay the exact amount they need for a tx instead of keeping a larger amount of crypto in their wallet.

[slaman29]

Never heard of it until I saw this post. The whitepaper's actually from June 11 2019 though so this is a project almost 2 years in the making, guess if people would have found issues with it, we'd know by now (unless nobody is using Portis!).

Interesting that this one DOES have a password system.

[joniboini]

Interesting that this one DOES have a password system.

It is not that new, other client-side wallets do this to encrypt the wallet file. But the recovery support does sound like it is different from them since most wallets that I know of don't support any of that because they don't store any file, just hosting the interface to interact with the encrypted wallet. This is why you can run it offline too.

[figmentofmyass]

They mentioned, "minimal KYC" under the "DIRECT PURCHASE" section of their homepage and only "No ID" on their FAQ page. Does anyone know what that means exactly?
^{- I've been searching with no luck.}

their in-wallet purchases are powered by https://banxa.com.

you need to supply an email address/phone number to buy through portis. you then need to verify the phone number via SMS. no ID documents required---up to what thresholds i'm not sure.

[annerl]

i was looking at shapeshift now that they support no-KYC DEX trading.

if you don't have a hardware wallet, the only option is to use portis, a browser-based wallet owned by shapeshift. it looks kinda like metamask. https://www.portis.io/

has anyone used it? can anyone comment on potential security issues? i don't have a hardware wallet and i'm wondering how secure this would be on an iOS or PC browser.

no do  not trust this wallet
i have maga problems with this and the zendesk support tells, they konw of the issue and cant tell if or when they can solve it

the issue i have is it sumarices ethereum classic and ethereum to one sum on one and the same privatkey

i imported ethereum classic with the priv key
the wallet shows the correct amount but
when i tryed to send the coins to a exchange
i got permanent error
the suport told me ethereum classic is a er 20 token of ethereum and therefor i have to have enough ether to move the token.
and sugested i use the banxa payment system  conected with shapeshif/portis so i  got me some ethereum
but still no send posible
and now comes the problem
the support sugested me to move elsewhere becouse they cant help
i tryed to export the priv key and
the

portis wallet sumarices ethereum classic with ethereum
it uses the same privkey to add ethereum and ehtereum classic

i am not sure what to do now and the support is no  help at all
they still tell me to try other wallets

the only why for me now to move  ethereum classic is to use priv key export
but there the etherum split shows up with the ethereum classic i had importe
i fear if i move the eth there might be a replay

i am stuck and the suport is useless
i got just misinformations like etc is a token and so on
i asked for a wallet they sugest  to move to with a privat key access and they sugested exodus
exodus has a seed but no succes to a privkey
and as we all know only  the one with the priv key is the owner ......

[Bitcoin_Arena]

>>snip<<

You haven't explained your problem very well, but Ethereum Classic is not and ERC20 token. It's a coin of a different blockchain like Bitcoin, Litecoin or Ethereum. I think what you should do is first move out the coin you think has more value, either Ether or Ethereum classic.

To move out Ethereum classic, you must import the private key to a wallet that supports Ethereum classic. The fee you will pay will be in ETC and not Ether.

[Potato Chips]

@annerl, are you trying to claim your ETC from the fork? then rest assured because a replay protection has been implemented on ETH's side (not sure about ETC), so just send your ETH first and your ETCs are good to go. Also, make sure you are using the latest version and not a fake phishing wallet.

This would provide a way to send transactions that work on Ethereum without working on ETC or the Morden testnet.

It's quite alarming that the support doesn't know ETC is on a separate blockchain, it's a very basic info and it sheds light on how their employees are screened/picked...

[annerl]

>>snip<<

You haven't explained your problem very well, but Ethereum Classic is not and ERC20 token. It's a coin of a different blockchain like Bitcoin, Litecoin or Ethereum. I think what you should do is first move out the coin you think has more value, either Ether or Ethereum classic.

To move out Ethereum classic, you must import the private key to a wallet that supports Ethereum classic. The fee you will pay will be in ETC and not Ether.

the problem is: after i purchased some eth , the eth are added to my etc, privkey. i wanted to export the priv key and the sum shows me eth plus etc in one ......
i know thats becouse of the split. each chain has the priv key on it. but the thread here asks is portis a risk. and if still such problems exist id say . the portis is not a good choice .
does it have the problem with every split coin ?
and the zendesk suport misinformation

[annerl]

@annerl, are you trying to claim your ETC from the fork? then rest assured because a replay protection has been implemented on ETH's side (not sure about ETC), so just send your ETH first and your ETCs are good to go. Also, make sure you are using the latest version and not a fake phishing wallet.

This would provide a way to send transactions that work on Ethereum without working on ETC or the Morden testnet.

It's quite alarming that the support doesn't know ETC is on a separate blockchain, it's a very basic info and it sheds light on how their employees are screened/picked...

thank you for the link
that helps with the  mess in the coins.

i will find a wallet where i can import the privkey, i looked both coins up on explorer and there the exact amount  of coins shows up.

but for the portis wallet: sure i imported my pivkey and then purchased eth with banxa, but what if i had purchased eth and then etc in the wallet, i wonder would it add coin value to one and the same priv key?

it has a bug .. the wallet needs to separate the source  for the amount value. i hope it is not more then that .
i was curious and i tryed to import a second priv key and it wont let me i guess the portis wallet cant handle more then one priv key for each coin



 

[Bitcoin_Arena]

i will find a wallet where i can import the privkey, i looked both coins up on explorer and there the exact amount  of coins shows up.

but for the portis wallet: sure i imported my pivkey and then purchased eth with banxa, but what if i had purchased eth and then etc in the wallet, i wonder would it add coin value to one and the same priv key?

Just leave Portis wallet and try to use another multicurrency wallet like Trust wallet. It supports importation of Ethereum and ETC classic blockchain private keys.

Not sure if I understand the second part of your question. Can you please rephrase it? What do you mean by "would it add coin value to one and the same priv key?"