Portal
Portal Team
Share the love
Want to stay updated? Subscribe below to keep in touch.
Power of Eject
An important offering for business risk mitigation.
June 19, 2024
For businesses to stay fully compliant, they need to ensure that user assets will not be lost or compromised in disaster scenarios, particularly in situations where the business or user is reliant on a third party such as Portal. Our eject feature is a critical offering that allows businesses and their users assets to access their wallets even if Portal were to cease to exist.
How the Eject feature works
Eject reconstructs the key shares from the MPC wallet into a single private key that can then be imported into a self-custodial external wallet such as Metamask. The private key calculation operation happens on the user’s device and does not involve Portal's servers.
Users will always have recourse to work with businesses to gain full custody of their wallets, including in a circumstance where Portal is unavailable. This feature protects users and businesses partnering with Portal as a signer or key management service.
Ways to implement Eject
Portal recommends businesses go one of two routes for implementing the eject feature:
1) Allowing users to eject at any time from the app but with sufficient warnings and two-factor authentication, or
2) Allowing users to eject only in extreme scenarios.
Keeping eject as a last resort option is particularly beneficial for apps that have a preponderance of users new to Web3. By only allowing the operation to be performed after customer service has determined it is the only remaining option to resolve an issue, or by direct request from a customer and clear communication of the security consequences, a business prevents its users from accidentally diminishing their personal security posture.
Apps that allow users to eject directly from their interface are encouraged to require two-factor authentication for that operation to ensure it is not done so accidentally. In addition, users are best served with warnings about the potential consequences of creating and using a single private key. Integrating this feature into the app requires greater design complexity but offers greater user autonomy.
For more details, review our docs on Eject today!