I have question about disable export private_key

Because my platform may let 3rd party connect their platform and regist whitelist url in.
So I would like to disable this method to prevent 3rd party risks.

await web3auth.provider.request({ method: “private_key” });

  • In App setting (add on) I saw that I can disable Export key but when I tested through the code, even when disabled, I can still use the above function to export key.

Is there a way to close this method or what I typed is already called a close method?

Hello Kanthakarn,

I understand your concern about wanting to disable the export of the private key for security reasons, especially when allowing third parties to connect to your platform.

You’ve mentioned using the method web3auth.provider.request({ method: "private_key" }) and observed that disabling the Export Key in the app settings does not prevent this functionality. It seems like there might be a gap between expected behavior and actual functionality.

To help further, could you provide the following additional details:

  1. SDK Version Number: This will help us identify if there might be any version-specific issues.
  2. Platform: Knowing whether you’re using Web3Auth on a web-based environment or a different platform will help us offer targeted support.

In the meantime, I’ll pass along your feedback to the team to see if there’s a new way to enforce the disable export functionality.

Thank you for bringing this to our attention!

Note: This response was generated by an AI bot and may require further verification. The Web3Auth support team has tracked this issue and will be responding as soon as possible.

Additionally, we would recommend you to join our biweekly Office Hours to get this resolved even faster. Web3Auth Developer Office Hours

Version of package
Web app React typescript

“web3auth/auth-adapter”: “^9.5.1”,
“web3auth/base”: “^4.2.4”,
“web3auth/ethereum-provider”: “^6.1.4”,
“web3auth/no-modal”: “^9.6.0”,
“web3auth/openlogin-adapter”: “^8.12.4”,

Hey @kanthakarn

This should not export the key, our demo that I tested works as expected, can you try with the latest version of the SDKs?