Add ⚡️ content to `Onboarding` > `Protecting a wallet`

[pavlenex]

The task is to review for the page for changes so it covers on-chain and Lightning.

[GBKS]

After reviewing the page, I could not think of anything Lightning-related to add. The page is about secure application access (Touch ID, Face ID) and privacy of sensitive information (balances, transactions). It does not cover key setup and backup (both covered better elsewhere). If we keep the page focus, then I don't think there's much to add around Lightning.

As for other additions to the page, I can think of a few:

• Add a short intro to explain the narrow focus of this page, an overview of attack vectors(like in the Bitcoin backups page) and links to private key management pages for additional reading
• Wallet limits - allow the user to set daily limits, so even if someone gets hold of this application, they can't transfer everything
• Security and privacy check lists - helper pages to let users know how appropriate their setup is
• Fake PIN entry that display mock data and only performs dummy transactions (a bit intense, TBH, not sure we need this)
• Something about progressive security and letting users know when the application (or their particular configuration) can no longer satisfy their use case
• During this content review, I'd also revise the screen visuals to match the UI Kit

I'll ask around if others have thoughts on Lightning-related content I am missing. Otherwise, I'll focus on the general page revision.

[pavlenex]

Some things that we may want to consider here:

• Node always beeing online?
• Watchtowers
  Maybe these two fall into "protecting" a wallet, but perhaps it's a far-fetch. Couldn't think of anything else.

[Bosch-0]

Could add details about including a security center like Muun has.

Supporting trampoline payments is a more private way to calculate LN payment paths - could mention that maybe.

[Bosch-0]

You could have all the 'Hiding sensitive information' images in a carousel then explain each option underneath. Could also have a carousel combining Face ID / PIN. This would make it much easier to parse / scroll this page imo.

[Bosch-0]

An interesting feature Blixt has that I haven't seen other wallets implement is the option to delete the recovery phrase from blixt once it's been backed up. Might be worth adding here!

[GBKS]

@Bosch-0 that's an interesting idea with deleting the recovery phrase. I assume the wallet can still do whatever it needs to do if it has the master public and private keys stored, right? So it's really just about protecting you from someone viewing your recovery phrase, copying it, and importing it into another wallet?

[GBKS]

Just updated the page with a few things:

• Images for feature details, fake wallet PIN choice (plausible deniability), and deleting a recovery phrase
• Restructured the page into clearer sections, with a table of contents at the top
• Copy review for consistency and clarity

The page is surprisingly long and describes a lot of different techniques now. I think I'll open it up for review and see what everyone thinks.

[Bosch-0]

So it's really just about protecting you from someone viewing your recovery phrase, copying it, and importing it into another wallet?

Yep! It just removes that easily human readable form that could be stolen.