Blockstream Jade QR PIN unlock

[Unsaint32]

I don't understand the purpose of this method of unlocking a Jade wallet. When I select the QR mode in my Jade, it prompts me to enter my previously selected PIN (6 digit number) to the Jade. Then the Jade gives a QR code which I need to scan from the phone (or PC with camera). Then the web page shows another QR, which I need to scan it using the Jade. Then the Jade issues QR, which I need to scan with the phone. Then the web page issues another QR which I need to scan with the Jade.

How does this scanning QR back and forth between the Blockstream website and the Jade wallet adds any security? Once the PIN is entered, anyone can do the same thing. How is this method any more secure than just entering PIN to unlock a wallet? 

[1714484909]

1714484909

[1714484909]

1714484909

[1714484909]

1714484909

[Jawhead999]

If you only have the PIN and the Jade wallet, you can't access your coins.
If you only have the PIN and your device (phone, PC etc), you can't access your coins.

A thief need to know the PIN, Jade wallet and your device in order to access the coins, it give additional steps than just knowing the PIN and able to access the coins.

You've create a similar thread yesterday Setting up Blockstream Jade

[Yamane_Keto]

If you do not like Jade QR Mode, connect the device using USB or Bluetooth. QR Mode also has two modes: SeedQR and QR PIN Unlock. Yesterday you asked about SeedQR, and what you are explaining now is QR PIN Unlock. It is true QR PIN steps are slow, but it presents fewer risks than SeedQR, and in both In both cases, you can bypass this by connecting via USB or Bluetooth.

[Stephen378Baker]

The purpose of the QR PIN unlock method is to provide a fully air-gapped workflow for accessing your Jade wallet, without needing to connect via USB or Bluetooth. This means that your Jade device and your companion device (phone or PC) do not exchange any data over the internet or any wireless network, which reduces the risk of hacking or interception.

The scanning QR back and forth between the Blockstream website and the Jade wallet is a way of encrypting and decrypting the data that is needed to unlock your wallet. Each QR code contains a part of the data, and the other device needs to scan it to complete the data. The data is also randomized and time-sensitive, which means that it changes every time you use the QR PIN unlock method, and it expires after a certain period of time. This makes it harder for anyone to copy or reuse the QR codes. DogLikesBest

The QR PIN unlock method is more secure than just entering PIN to unlock a wallet, because it adds an extra layer of verification and protection. Even if someone knows your PIN, they still need to have access to both your Jade device and your companion device, and they need to scan the QR codes in the correct order and within the time limit. This makes it very unlikely for anyone to unlock your wallet without your permission.

You can find more information on how to use the QR PIN unlock method on the Blockstream Help Center or the Blockstream Jade website.

I hope this answer helps you understand the purpose and the security of the QR PIN unlock method.

[Unsaint32]

Wow great information. I had no idea, all three (PIN, wallet, & phone) need to be specific to unlock. BTW, what happens if I lose my phone (the one I used to scan the Jade QR)? I guess, I need to set it up again by restoring the wallet. Thank you so much, folks.

[dkbit98]

How does this scanning QR back and forth between the Blockstream website and the Jade wallet adds any security? Once the PIN is entered, anyone can do the same thing. How is this method any more secure than just entering PIN to unlock a wallet?  

Creating one topic is enough, there is really no need for you two create two separate topics in short time about the same PIN issue

Adding additional PIN code is replacement for secure element, and it's not recorded on device like in other hardware wallets.
That is why they Blockstream is calling this a virtual secure element.

There is plenty information on their website, especially related with QR mode you are using:
https://help.blockstream.com/hc/en-us/articles/10731523559193-Which-unlock-method-should-I-choose-to-access-QR-Mode

Wow great information. I had no idea, all three (PIN, wallet, & phone) need to be specific to unlock. BTW, what happens if I lose my phone (the one I used to scan the Jade QR)?

Nothing happens if you have seed words written and stored offline in secure place.

[Yamane_Keto]

Wow great information. I had no idea, all three (PIN, wallet, & phone) need to be specific to unlock. BTW, what happens if I lose my phone (the one I used to scan the Jade QR)? I guess, I need to set it up again by restoring the wallet. Thank you so much, folks.

QR PIN Unlock adds more process to the setup as it requires several encryption and decryption settings, so as long as you have SeedQR you don't need to worry about losing your phone. It is a specialized mode against certain attacks, so if you do not know what you are doing, simply connect it via Bluetooth.

Adding a passphrase to SeedQR will enhance your security if you live in a shared house and are afraid that someone will find your SeedQR.

[satscraper]

~

Are you the merit-hunter?

Why did you initiate discussion in  the new thread which resembles your old one started by  two days ago? (https://bitcointalk.org/index.php?topic=5485619)

You have already received responses that cover  your question.

Shame of you.