DFINITY Foundation

Synapse.vote (original)

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8yeargangDAO

Isaac Valadez

Krzysztof Żelazko

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Synapse.vote (NEW)

Taggr Network

CodeGov

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Gold DAO

NeuronPool

LORIMER

B3Pay

ZenithCode

Aviate Labs

D-QUORUM

Yuku AI

Internet Computer Association

Cosmicrafts

Arthur’s Neuron (used to be cycle_dao)

Inactive (Request Removal) - The Fools' Court

$STACK

Always Rejects

John Wiegley

The goal of this proposal is to enhance the security features of the Internet Identity service by introducing the option for users to create a dedicated management device. This device would have exclusive rights to perform critical changes, such as controlling the creation of backup seed phrases.

### 1. Objective

The goal of this proposal is to enhance the security features of the Internet Identity service by introducing the option for users to create a dedicated management device. This device would have exclusive rights to perform critical changes, such as controlling the creation of backup seed phrases.

---

### 2. Background

The current implementation of Internet Identity allows any device with login access to make changes, such as adding or removing other devices, or creating a backup seed phrase. This increases the risk profile, as any compromised device could potentially hijack an Internet Identity, delete other devices, and/or generate or replace the seed phrase (if not created yet or in unlocked status).

---

### 3. Why this is important

Providing users with the option to designate a dedicated management device ensures enhanced security for those who want tighter control over their Internet Identity. This reduces the likelihood of unauthorized changes, protects against identity hijacking, and strengthens user confidence in the system.

---

### 4. Pros

- **Improved Security**: The dedicated management device can perform sensitive administrative actions, such as creating or managing backup seed phrases, while other devices cannot.
- **User Choice**: Users retain flexibility to opt into this feature based on their security needs.
- **Enhanced Control**: Users gain better oversight and restriction of critical actions.
- **Peace of Mind**: Mitigates risks associated with compromised devices or backup processes.

---

### 5. Cons

- **Added Complexity**: Users who opt for a dedicated management device must ensure they retain access to it. 

---

### 6. Key Milestones (if any)

1. Research and analyze the technical requirements for introducing an optional management device.
2. Develop a prototype for the feature, ensuring its seamless integration.
3. Collect user feedback and iterate on the design.
4. Deploy the feature, making it an optional security enhancement for users.

---

### 11. What is asked of the community

1. **Review Comments**: Provide feedback on the feasibility and importance of this proposal.
2. **Vote**: Accept or reject the proposal through an NNS Motion vote.

enhance the security features of the Internet Identity service by introducing a dedicated management device