‹Back
nufi Support Portal
NuFiNuFi
All ideas

Keep me logged in behavior seems insecure and should include timeouts and default setting

When using the chrome extension, I find the behavior of "Keep me logged in" quite strange to other wallets. While the main wallet page does have a timeout, no such timeout is imposed on connected dapps if "Keep me logged in" is checked. The only way then to truly disconnect the dapp is to restart the browser. Nu.fi wallet extension should add a feature to have a timeout for connected dapps, not just the main wallet window, and it should be configurable in settings. Currently, all dapp connection windows automatically check "Keep me logged in" with no way to disable that. Nu.fi wallet extension should either: Remember "Keep me logged in" last state or Have a settings option like "Check 'keep me logged in' by default" Without timeouts for connected dapps, and keep-me-logged-in by default I find the behavior of Nu.fi strange and functionally insecure compared to what most other wallets are doing. The experience is such that if you leave your browser open but close tabs the specific dapp stays authenticated and doesn't require a password again. I find this strange that I can close all the tabs and connection windows and don't need to authenticate if I create a new tab with that same dapp. Most wallet would have a timeout between 1 minute and 1 hour, where you need to authenticate again after a period of time or even if you've disconnected the wallet.