Plug n Play vs Core Kit security

Hi all! :wave:

Just wanted to ask you if there are security differences between using Plug n Play or Core Kit.
Is Plug n Play implemented based in Core Kit or are there differences between them?

Thank you for your time. :pray:

@0xjcc Welcome Aboard!

Some of the features you get with Plug n Play are:

  1. Default Modal UI
  2. Better UX flow,
  3. Easy recovery flows,
  4. MFA setup

You can look at the differences here Plug and Play vs Core Kit | Documentation | Web3Auth

Hi @vjgee thanks for your reply, but I would really like to have your take on the difference between the two solutions in terms of security. Heard from a dev friend that Plug n Play was a less secure option than Core Kit. Is this true? Or is Plug n Play built on top of Core Kit?

Thank you :pray:

The Core Kit SDKs serve as the backbone of the Web3Auth Plug n Play (PnP) SDKs. They form the essence of the Web3Auth infrastructure and allow for direct usage within decentralized applications (dApps) to foster deeper integration. You can read more here

Web3Auth’s Wallet Management Infrastructure enhances security by distributing a user’s wallet across various key shares, thereby avoiding direct exposure of seed phrases. These key shares form a ‘web of trust’ and enable wallet management akin to multi-factor account handling. Users employ OAuth logins, trusted devices, and other factors to manage their cryptographic key pairs. Importantly, the complete private keys are not stored anywhere within the Wallet Infrastructure system, including our databases or any participating nodes.

For managing wallets, our infrastructure uses various cryptographic techniques such as Shamir’s Secret Sharing, Threshold Cryptography, and Multi Party Computation. To know more about how we manage wallets, please refer to our Wallet Management and Security of our Infrastructure.

1 Like

That’s great! Thank you so much for your help :pray: Keep building great stuff :rocket:

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.