Mixin Safe (Decentralized Multisig+MPC+Timelock solution) review preperation

[LoyceV]

I edited my application earlier, but it's better to post my question here:
It looks like I'll have to install an app on a smartphone. I prefer a website for several reasons:
1. Smartphones are inconvenient to use for finances.
2. I can't easily use a VM or wipe my smartphone.
3. I don't want to install VPN software on my smartphone.
4. I never install unknown software on my devices.

If I can review without a smartphone, I'll gladly apply. If not, my review ends with "I'll never use such a service". I don't even install software from my bank.
On second thought: I can experiment with Mullvad VPN on an old tablet, and wipe it afterwards. It won't run very smooth, but it should work. Still, I prefer a desktop computer for anything other than "coffee money".

you may use some phone number services on the Internet to get a random phone number just for a single SMS. Then you can begin the test, just you know that you may lose the account access because you don't own the random phone number

Does that mean someone else can access my account just by accessing the same phone number?

[1714556556]

1714556556

[1714556556]

1714556556

[cedricfung]

you may use some phone number services on the Internet to get a random phone number just for a single SMS. Then you can begin the test, just you know that you may lose the account access because you don't own the random phone number

Does that mean someone else can access my account just by accessing the same phone number?

Correct, it's just for your test of the service, so that nobody knows it's your number or your account.

[AB de Royse777]

I edited my application earlier, but it's better to post my question here:
It looks like I'll have to install an app on a smartphone. I prefer a website for several reasons:
1. Smartphones are inconvenient to use for finances.
2. I can't easily use a VM or wipe my smartphone.
3. I don't want to install VPN software on my smartphone.
4. I never install unknown software on my devices.

If I can review without a smartphone, I'll gladly apply. If not, my review ends with "I'll never use such a service". I don't even install software from my bank.
On second thought: I can experiment with Mullvad VPN on an old tablet, and wipe it afterwards. It won't run very smooth, but it should work. Still, I prefer a desktop computer for anything other than "coffee money".

I am glad you removed some contents from the campaign thread or I was planning to remove it. All good now :-D

That second thought, it would be great if you try it from that old tablet. As far as I understand you need to download the app either from iOS or android unfortunately.
I would love to see what you have to tell in the review.

Cheers,

[LoyceV]

That second thought, it would be great if you try it from that old tablet. As far as I understand you need to download the app either from iOS or android unfortunately.
I would love to see what you have to tell in the review.

Okay, I'll give it a try. I'm kinda curious and new to the timelocked multisig script thing.
I've applied again so I don't mess up your "batch 4".

[Sarah Azhari]

As far as I understand you need to download the app either from iOS or android unfortunately.

Yes, I'm almost happy and excited to try when look the application has Windows and Linux download, but after installing, I still need login scan from the Android or IOS application, and I can't find also a button which I can log in use phone number on windows application, this mean installed application in a phone is necessary.

1 more important thing is I can find mixin applications on play store when my phone didn't connect VPN. this mean the aplication is not available in my country Indonesia.

therefore I can't join your service.

[ajiz138]

As far as I understand you need to download the app either from iOS or android unfortunately.

Yes, I'm almost happy and excited to try when look the application has Windows and Linux download, but after installing, I still need login scan from the Android or IOS application, and I can't find also a button which I can log in use phone number on windows application, this mean installed application in a phone is necessary.

1 more important thing is I can find mixin applications on play store when my phone didn't connect VPN. this mean the aplication is not available in my country Indonesia.

therefore I can't join your service.

I tried with free VPN but still on Play Store that Mixin is not available in Indonesia, then I tried to download the APK file from Mixin but I can't receive the 4 digit code already 6x I re-send the code it still doesn't appear via SMS.
I am in the second batch of this review service but currently I can't do anything everything is not running normally. (Maybe for certain areas)
@Royse777 like I have to resign from the review, but luckily I always check first before the funds are sent.

[Woodie]

As far as I understand you need to download the app either from iOS or android unfortunately.

Yes, I'm almost happy and excited to try when look the application has Windows and Linux download, but after installing, I still need login scan from the Android or IOS application, and I can't find also a button which I can log in use phone number on windows application, this mean installed application in a phone is necessary.

1 more important thing is I can find mixin applications on play store when my phone didn't connect VPN. this mean the aplication is not available in my country Indonesia.

therefore I can't join your service.

I tried with free VPN but still on Play Store that Mixin is not available in Indonesia, then I tried to download the APK file from Mixin but I can't receive the 4 digit code already 6x I re-send the code it still doesn't appear via SMS.

If Mixin does not show up or rather not supported for Indonesia then chances are high that if you using an Indonesian number code via sms won't be received unless someone in your locality managed to get one through!

But like Royse said in the review thread, an online number can be used..have you tried this to bypass any potential restrictions?

I am in the second batch of this review service but currently I can't do anything everything is not running normally. (Maybe for certain areas)
@Royse777 like I have to resign from the review, but luckily I always check first before the funds are sent.

Go for the bitcoincore method, goodluck

[NotATether]

As far as I understand you need to download the app either from iOS or android unfortunately.

Yes, I'm almost happy and excited to try when look the application has Windows and Linux download, but after installing, I still need login scan from the Android or IOS application, and I can't find also a button which I can log in use phone number on windows application, this mean installed application in a phone is necessary.

1 more important thing is I can find mixin applications on play store when my phone didn't connect VPN. this mean the aplication is not available in my country Indonesia.

therefore I can't join your service.

I tried with free VPN but still on Play Store that Mixin is not available in Indonesia, then I tried to download the APK file from Mixin but I can't receive the 4 digit code already 6x I re-send the code it still doesn't appear via SMS.

If Mixin does not show up or rather not supported for Indonesia then chances are high that if you using an Indonesian number code via sms won't be received unless someone in your locality managed to get one through!

But like Royse said in the review thread, an online number can be used..have you tried this to bypass any potential restrictions?

Most "free SMS receivers" are crap and won't relay numbers to you, there are a number of SMS services backed by real numbers which you can see on kycnot.me and use for this purpose. It works just fine with a real number too.

Also, I just download the APK from 3rd party sources instead of using Google Play. It's not strictly necessary.

I am in the second batch of this review service but currently I can't do anything everything is not running normally. (Maybe for certain areas)
@Royse777 like I have to resign from the review, but luckily I always check first before the funds are sent.

You should've installed the app and played with it a bit before signing up for the review, so that you could see if you could get it working.

you may use some phone number services on the Internet to get a random phone number just for a single SMS. Then you can begin the test, just you know that you may lose the account access because you don't own the random phone number

Does that mean someone else can access my account just by accessing the same phone number?

I think you still need the PIN to sign in with the phone number, because the PIN is stored on their servers in some encrypted form.

[AB de Royse777]

I am in the second batch of this review service but currently I can't do anything everything is not running normally. (Maybe for certain areas)
@Royse777 like I have to resign from the review, but luckily I always check first before the funds are sent.

Removed you from Batch 2. If circumstance changes then let me know via PM, I will try to fit you a space.

[Sarah Azhari]

I tried with free VPN but still on Play Store that Mixin is not available in Indonesia, then I tried to download the APK file from Mixin but I can't receive the 4 digit code already 6x I re-send the code it still doesn't appear via SMS.

I am able to download it with the method above. But, same as your situation, I can't receive any SMS, I changed several providers and still didn't receive it.

But like Royse said in the review thread, an online number can be used..have you tried this to bypass any potential restrictions?

I never used it before because I don't know if safe it or not, but when appears OTP in public, I think it's not safe, Maybe someone out there waits this moment to create a parallel device.

Go for the bitcoincore method, goodluck

connect with Owner's wallet like Bitcoin core is the next method after we successfully installed Mixin safe on the phone, there is a next step on Safe Dashboard which I think it's not affect anything even if we use other applications like mornin' key because we need installed mixin messenger on 1st step, if didn't, we can't use any method like bitcoin core, mornin key, and hardware wallet.

[ajiz138]

You should've installed the app and played with it a bit before signing up for the review, so that you could see if you could get it working.

Yeaaaah, I was a little quicker to apply, but I thought it was no limit for my area, but I realized it was a little careless. 

Removed you from Batch 2. If circumstance changes then let me know via PM, I will try to fit you a space.

Okey, thanks @Royse if anything changes I'll PM immediately.

I am able to download it with the method above. But, same as your situation, I can't receive any SMS, I changed several providers and still didn't receive it.

It means the same that Indonesia can't use Mixin, I only tried one provider, but with you saying other providers are the same it means I don't need to try again because the results will be the same.

I never used it before because I don't know if safe it or not, but when appears OTP in public, I think it's not safe, Maybe someone out there waits this moment to create a parallel device.

No, I won't use the "free SMS receiver" it's worse, but I never knew about the paid OTP even though it's said to be premium but I'm still not sure.

[dkbit98]

OK, I somehow managed to register with Mixin and download everything that is needed for testing, so I decided to send my application for review.
I do like the idea of Multisig but let's see how this Mixing setup works in my real life testing.

Question for cedricfung:
Some people in my local board are not sure what wallets are supported except ones mentioned so far (Ledger, Bitcoin Core, Bitbox, Coldcard, Mornin key, etc), so can we get a full list of all supported devices/wallets?
Is Trezor hardware wallet supported?

[cedricfung]

OK, I somehow managed to register with Mixin and download everything that is needed for testing, so I decided to send my application for review.
I do like the idea of Multisig but let's see how this Mixing setup works in my real life testing.

Question for cedricfung:
Some people in my local board are not sure what wallets are supported except ones mentioned so far (Ledger, Bitcoin Core, Bitbox, Coldcard, Mornin key, etc), so can we get a full list of all supported devices/wallets?
Is Trezor hardware wallet supported?

Thank you  

The wallets listed are the only supported so far as I know, and only Bitcoin Core, Ledger, Mornin Key have been tested. And I'm sure Trezor doesn't support the miniscript feature yet, so not Mixin Safe compatible.

It means the same that Indonesia can't use Mixin, I only tried one provider, but with you saying other providers are the same it means I don't need to try again because the results will be the same.

I never used it before because I don't know if safe it or not, but when appears OTP in public, I think it's not safe, Maybe someone out there waits this moment to create a parallel device.

No, I won't use the "free SMS receiver" it's worse, but I never knew about the paid OTP even though it's said to be premium but I'm still not sure.

I just checked we have problem delivering SMS to Indonesian numbers, and we are working on the anonymous number feature which allows you to sign in with mnemonic words, will try to roll it asap.

[Coin_trader]

I tried with free VPN but still on Play Store that Mixin is not available in Indonesia, then I tried to download the APK file from Mixin but I can't receive the 4 digit code already 6x I re-send the code it still doesn't appear via SMS.

I am able to download it with the method above. But, same as your situation, I can't receive any SMS, I changed several providers and still didn't receive it.

I use this SMS receiver online https://temporary-phone-number.com/ to get my SMS code, which arrives a few seconds after I request a code. Probably the problem is the fact that your country is not supported by the app then use other country's SMS to receive the code for the sake of the app test.


I just want to give a thumbs up to Mixin support for being quick to solve issues encountered on Mixin Safe. I recently encounter error code 500 when I'm trying to create a safe. They fixed immediately the bug and notified me via email to continue my test. Customer support is very active in helping customers. I hope this will continue in the long term.

[bitmover]

I just started my review, but I decided to share this here first. As it is not exactly a review of the service, but a security alert.


There is a similar website, which the team should consider buying:
safe.mixing.zone/

This domain is owned by another company, and I mistakenly put it in my web browser.

Suggestion: put all your products in the same domain and redirect them. Multiple domains is confused for the user.
Currently domains that i noticed mixin team has:
https://safe.mixin.zone/
https://mixin.one/
https://messenger.mixin.one/
https://mornin.one/

I think adding all to the same domain and creating subdomains is much easier to users and customers. I am always worried when I move to another domain, specially within the same company/service

[dkbit98]

The wallets listed are the only supported so far as I know, and only Bitcoin Core, Ledger, Mornin Key have been tested. And I'm sure Trezor doesn't support the miniscript feature yet, so not Mixin Safe compatible.

Thanks for quick answer.
I will have to explore miniscript topic more, especially for hardware wallets, and I will try to find all wallets that support them.
If Coldcard supports miniscript than there is a good chance Passport wallet is also supporting it (they forked from old Coldcard code), unless they decided to opt out.
This is interesting topic for discussion, but if I remember correctly ledger once had a bug that was related with miniscript feature in their wallet.

[cedricfung]

I just want to give a thumbs up to Mixin support for being quick to solve issues encountered on Mixin Safe. I recently encounter error code 500 when I'm trying to create a safe. They fixed immediately the bug and notified me via email to continue my test. Customer support is very active in helping customers. I hope this will continue in the long term.

Thank you  

Will keep improving the product and customer support.

There is a similar website, which the team should consider buying:
safe.mixing.zone/

This domain is owned by another company, and I mistakenly put it in my web browser.

Suggestion: put all your products in the same domain and redirect them. Multiple domains is confused for the user.
Currently domains that i noticed mixin team has:
https://safe.mixin.zone/
https://mixin.one/
https://messenger.mixin.one/
https://mornin.one/

I think adding all to the same domain and creating subdomains is much easier to users and customers. I am always worried when I move to another domain, specially within the same company/service

Thanks for pointing out this, we are working on the website and brand improvement, now I also feel they look fragmented.

We will put everything under domain mixin.one, and the mixin.zone domain is only for beta test service, once the product is ready, it will be available at the one domain.

Thank you

The wallets listed are the only supported so far as I know, and only Bitcoin Core, Ledger, Mornin Key have been tested. And I'm sure Trezor doesn't support the miniscript feature yet, so not Mixin Safe compatible.

Thanks for quick answer.
I will have to explore miniscript topic more, especially for hardware wallets, and I will try to find all wallets that support them.
If Coldcard supports miniscript than there is a good chance Passport wallet is also supporting it (they forked from old Coldcard code), unless they decided to opt out.
This is interesting topic for discussion, but if I remember correctly ledger once had a bug that was related with miniscript feature in their wallet.

Yes, ledger had that bug that generates a wrong address. For Mixin Safe, we don't use Ledger to generate the address, and we can make sure the address script is correct. Ledger is only doing the private key management.

[Coin_trader]

@cedricfung, I created a safe 2 hours ago and until now it's still on draft status. The note shows that the summary process only takes a minute. Am I missing something here to make my safe active? The support now is inactive while they have the online status. I decided to post it here to get an immediate solution to complete my test on the safe.

The image below is the current status of my pending safe.

[cedricfung]

@cedricfung, I created a safe 2 hours ago and until now it's still on draft status. The note shows that the summary process only takes a minute. Am I missing something here to make my safe active? The support now is inactive while they have the online status. I decided to post it here to get an immediate solution to complete my test on the safe.

The image below is the current status of my pending safe.

Hi,

Sorry for this inconvenience, which owner wallet are you using? May you send me the safe id through private message? Just the URL of this safe represents the id.

[Woodie]

Not sure if the question belongs here or not, but is it just me or others are experiencing this...if you log into Mixin Safe via the web platform , I have noticed that mixin doesn't log you out automatically even after hours of you not being near you PC! Is this suppose to work this way, thought after X minutes it should be asking you to sign In  with Mornin key 🔑 or something