Guardians
Guardians
Introducing
Guardians
Explore
Safeguard your funds like never before.
Safeguard your funds like never before.
An extra security layer, similar to what you already have for your online accounts, is now available on the blockchain.
An extra security layer, similar to what you already have for your online accounts, is now available on the blockchain.
Watch the video
Watch the video
Available now on xPortal and the MultiversX Web Wallet.
Available now on xPortal and the MultiversX Web Wallet.
1
The game-changer
1
The game-changer
Billions in crypto are stolen
Billions in crypto are stolen
due to an ever-growing number of attacks.
due to an ever-growing number of attacks.
That’s why we designed the Guardians.
That’s why we designed the Guardians.
To make sure that your digital assets remain safe and protected, even if something goes wrong.
To make sure that your digital assets remain safe and protected, even if something goes wrong.
“2022 became the biggest year for crypto thieves” - Coindesk
“2022 became the biggest year for crypto thieves” - Coindesk
2
Easy to setup, impossible to break.
2
Easy to setup, impossible to break.
Enhanced
security
Enhanced
security
By requiring two separate forms of verification, Guardians makes sure that you and only you can control the funds in your wallet.
Even if someone manages to gain control of your Secret Phrase, they won’t be able to move any funds without the Guardian’s co-signing.
By requiring two separate forms of verification, Guardians makes sure that you and only you can control the funds in your wallet.
Even if someone manages to gain control of your Secret Phrase, they won’t be able to move any funds without the Guardian’s co-signing.
How was the Guardian feature tested?
How was the Guardian feature tested?
Guardians can be activated from a variety of MultiversX wallets, enabling for flexible and tailored security measures.
How does the Guardian work?
Guardians can be activated from a variety of MultiversX wallets, enabling for flexible and tailored security measures.
How does the Guardian work?
Effortless
security upgrade
Designed for users of all skill levels, they're simple to activate and operate, providing an effortless security upgrade.
What are Invisible Guardians?
Effortless
security upgrade
Designed for users of all skill levels, they're simple to activate and operate, providing an effortless security upgrade.
What are Invisible Guardians?
3
Meet the first Guardians
3
Meet the first Guardians
In the same way your online banking, social media or email accounts are protected with two-factor authentication, you can now secure your digital assets with Guardians.
See how to activate your Guardian
In the same way your online banking, social media or email accounts are protected with two-factor authentication, you can now secure your digital assets with Guardians.
See how to activate your Guardian
4
Frequently Asked Questions
4
Frequently Asked Questions
How does the Guardian work?
The main scope of the Guardians feature is to protect users against potential attacks. Users can assign another entity as their Guardian, who will also have to sign all transactions from the moment it becomes active. All that a user has to do is to use an Authenticator app and connect it within their wallet of choice. In the case of the xPortal app, the device’s application will act as the Guardian, circumventing the need for an Authenticator app.
How does the Guardian work?
The main scope of the Guardians feature is to protect users against potential attacks. Users can assign another entity as their Guardian, who will also have to sign all transactions from the moment it becomes active. All that a user has to do is to use an Authenticator app and connect it within their wallet of choice. In the case of the xPortal app, the device’s application will act as the Guardian, circumventing the need for an Authenticator app.
Why does it take 20 days to change a Guardian?
The 20-day cooldown period is designed to safeguard staked funds and relieve pressure on users. Given that it might take longer than 10 days to safely transfer funds to a secure account, we have extended this period by an additional 10 days. This not only allows the user ample time to react if their account is compromised, but it also provides a buffer for the user to counteract potential threats.
Why does it take 20 days to change a Guardian?
The 20-day cooldown period is designed to safeguard staked funds and relieve pressure on users. Given that it might take longer than 10 days to safely transfer funds to a secure account, we have extended this period by an additional 10 days. This not only allows the user ample time to react if their account is compromised, but it also provides a buffer for the user to counteract potential threats.
What do I have to do if my account is compromised?
In the case that your account has been compromised, with our system designed to alert you in such situations, we strongly recommend that you transfer your assets to a secure account. Furthermore, it’s crucial to actively engage with your account. This is necessary to fight potential Guardian changes that an attacker might attempt to execute. In any case, make sure not to change your Guardian until you manage to transfer your funds to a secure wallet.
What do I have to do if my account is compromised?
In the case that your account has been compromised, with our system designed to alert you in such situations, we strongly recommend that you transfer your assets to a secure account. Furthermore, it’s crucial to actively engage with your account. This is necessary to fight potential Guardian changes that an attacker might attempt to execute. In any case, make sure not to change your Guardian until you manage to transfer your funds to a secure wallet.
What happens if I lose access to my authenticator?
There’s no need to panic if this happens. You can change your Guardian to a new authenticator app to which you still have access.
What happens if I lose access to my authenticator?
There’s no need to panic if this happens. You can change your Guardian to a new authenticator app to which you still have access.
What are Invisible Guardians?
Invisible Guardians is a variation of the Guardians feature tailored for xPortal users. It is specifically designed to deliver the same level of security introduced by the Guardians feature while maintaining the same ease of use xPortal users are accustomed to.
What are Invisible Guardians?
Invisible Guardians is a variation of the Guardians feature tailored for xPortal users. It is specifically designed to deliver the same level of security introduced by the Guardians feature while maintaining the same ease of use xPortal users are accustomed to.
How do Invisible Guardians work?
When active, the feature enables an invisible guardian which is encrypted and stored locally on your device, silently co-signing every transaction. This acts as an additional security layer and safeguards the account in situations where, one way or another, the secret phrase has been compromised.
How do Invisible Guardians work?
When active, the feature enables an invisible guardian which is encrypted and stored locally on your device, silently co-signing every transaction. This acts as an additional security layer and safeguards the account in situations where, one way or another, the secret phrase has been compromised.
How do I activate an Invisible Guardian on my account?
The Guardians feature can be accessed in the Security section, which can be found in the xPortal Settings. There, users can activate an Invisible Guardian on their account by going through a few simple steps:
Create a backup password for your guarded account
Enable the Invisible Guardian through a blockchain transaction
Wait for the 20-day cooldown period to pass
Activate the Invisible Guardian through another blockchain transaction
How do I activate an Invisible Guardian on my account?
The Guardians feature can be accessed in the Security section, which can be found in the xPortal Settings. There, users can activate an Invisible Guardian on their account by going through a few simple steps:
Create a backup password for your guarded account
Enable the Invisible Guardian through a blockchain transaction
Wait for the 20-day cooldown period to pass
Activate the Invisible Guardian through another blockchain transaction
Can I deactivate the Invisible Guardian feature once it was activated?
The Invisible Guardian can be deactivated at any time, but it requires that a transaction is sent and signed by the Guardian currently in place on that account.
Can I deactivate the Invisible Guardian feature once it was activated?
The Invisible Guardian can be deactivated at any time, but it requires that a transaction is sent and signed by the Guardian currently in place on that account.
Can I change my Guardian?
Yes, the Invisible Guardian can be changed, and there are two ways in which this action can be performed:
If the user has access to the current Guardian the change can be done immediately by signing a transaction
If the user doesn’t have access to the current Guardian the process implies a 20-day cooldown period before the change of Guardian takes place.
Can I change my Guardian?
Yes, the Invisible Guardian can be changed, and there are two ways in which this action can be performed:
If the user has access to the current Guardian the change can be done immediately by signing a transaction
If the user doesn’t have access to the current Guardian the process implies a 20-day cooldown period before the change of Guardian takes place.
Why do I have to wait 20 days to activate or change an Invisible Guardian?
The 20-day cooldown period is designed to safeguard staked funds and relieve pressure on users. Given that it might take longer than 10 days to safely transfer funds to a secure account, we have extended this period by an additional 10 days. This not only allows the user ample time to react if their account is compromised, but it also provides a buffer for the user to counteract potential threats.
Why do I have to wait 20 days to activate or change an Invisible Guardian?
The 20-day cooldown period is designed to safeguard staked funds and relieve pressure on users. Given that it might take longer than 10 days to safely transfer funds to a secure account, we have extended this period by an additional 10 days. This not only allows the user ample time to react if their account is compromised, but it also provides a buffer for the user to counteract potential threats.
What implications should I be aware of before activating an Invisible Guardian on my account?
Aside from the extra security and the peace of mind that goes hand in hand with activating an Invisible Guardian on your account, there are a few things everyone should be aware of beforehand:
You will only be able to process transactions from xPortal or by logging in with xPortal
You won’t be able to import your secret phrase into other wallet apps
What implications should I be aware of before activating an Invisible Guardian on my account?
Aside from the extra security and the peace of mind that goes hand in hand with activating an Invisible Guardian on your account, there are a few things everyone should be aware of beforehand:
You will only be able to process transactions from xPortal or by logging in with xPortal
You won’t be able to import your secret phrase into other wallet apps
What if something happens to my device or I change it?
The Invisible Guardian is stored locally on your device, but the first step of setting it up is creating an encrypted backup containing the Guardian. This makes importing it on a different device as easy as it gets, all you need to do is to provide the password associated with the guarded backup.
What if something happens to my device or I change it?
The Invisible Guardian is stored locally on your device, but the first step of setting it up is creating an encrypted backup containing the Guardian. This makes importing it on a different device as easy as it gets, all you need to do is to provide the password associated with the guarded backup.
What happens if my secret phrase is compromised?
If your secret phrase is compromised and the Invisible Guardian is active, whoever has access to the secret phrase will be unable to process any transactions from your account. They will be able though to request the change of the Guardian. This process lasts 20 days. You will be able to cancel any request of this kind, but our recommendation is to transfer all your assets (staked and unstaked) to a new wallet.
What happens if my secret phrase is compromised?
If your secret phrase is compromised and the Invisible Guardian is active, whoever has access to the secret phrase will be unable to process any transactions from your account. They will be able though to request the change of the Guardian. This process lasts 20 days. You will be able to cancel any request of this kind, but our recommendation is to transfer all your assets (staked and unstaked) to a new wallet.
How would I know if my account is compromised?
A red warning message is displayed in your xPortal account every time a Guardian is enabled, changed or disabled. If it was you who processed this change, you can confirm that the action was performed by you and the message disappears. If the action was not performed by you, we strongly recommend moving all your assets to a new wallet within 20 days. Also, to ensure maximum protection we strongly recommend you access your account periodically.
How would I know if my account is compromised?
A red warning message is displayed in your xPortal account every time a Guardian is enabled, changed or disabled. If it was you who processed this change, you can confirm that the action was performed by you and the message disappears. If the action was not performed by you, we strongly recommend moving all your assets to a new wallet within 20 days. Also, to ensure maximum protection we strongly recommend you access your account periodically.
How can I use an xPortal account on the MultiversX Wallet if it has the Invisible Guardian enabled?
You can still use the MultiversX Wallet via WalletConnect or through the xPortal dApp hub section.
How can I use an xPortal account on the MultiversX Wallet if it has the Invisible Guardian enabled?
You can still use the MultiversX Wallet via WalletConnect or through the xPortal dApp hub section.
How was the Guardian feature tested?
As it happens with any security feature we deploy, Guardians were thoroughly tested both internally and during a public $20,000 USD hacking competition, where hundreds of participants, including security experts, unsuccessfully tried to get the bounty from a guarded account with the 24 words secret phrase leaked publicly.
How was the Guardian feature tested?
As it happens with any security feature we deploy, Guardians were thoroughly tested both internally and during a public $20,000 USD hacking competition, where hundreds of participants, including security experts, unsuccessfully tried to get the bounty from a guarded account with the 24 words secret phrase leaked publicly.
Scale across the Multiverse.
Build new apps, new economies, new worlds.
Need more information?