Can a user's private key be reset given they only have the "social" share?

asherkleiman · October 26, 2023, 5:18pm

We are having a situation that causes some users to lose their local shares when only two shares were available (social and local). We have implemented a security question step to provide a third share, but some users are already locked out of their accounts because they can’t possibly recover the local share and can’t generate a “security question” share since they never set it up in the first place.

I am wondering if there is any way we can allow users to reset their private key (create a new one) using the same social login. Is there a way we can allow the user to reset this key this given that they can prove access to their local share?

Thank you in advance for your answers.

vjgee · October 27, 2023, 1:07am

@asherkleiman Welcome Aboard!

Your request has been forwarded to our Dev team to check for the feasbility and we will get back with further updates.

pepper · October 27, 2023, 5:15am

Hello @asherkleiman

github.com

Web3Auth/web3auth-core-kit-examples/blob/main/tkey-react-native/tkey-react-native-firebase-example/App.tsx#L316C2-L331


      
          const resetAccount = async () => {
            if (!tKeyInstance) {
              uiConsole('tKeyInstance not initialized yet');
              return;
            }
            try {
              uiConsole(oAuthShare);
              await tKeyInstance.storageLayer.setMetadata({
                privKey: oAuthShare as any,
                input: {message: 'KEY_NOT_FOUND'},
              });
              uiConsole('Reset Account Successful.');
            } catch (e) {
              uiConsole(e);
            }
          };

You can. Users can reset their account by using resetAccount, but please notice that they can’t undo this action once they reset their account.
check out our tkey react native example for more detail implementation.