How Ballet’s Security Protocol Eliminates the Need for Passwords and Seed Phrases

Cryptocurrency storage often relies on passwords and seed phrases to protect private keys. This approach places a burden on users to create, remember, or securely store these credentials. Ballet takes a different approach, offering the highest security without the need for users to manage passwords or seed phrases, making crypto storage simpler. To understand how Ballet eliminates the need for passwords, it's essential to understand Ballet’s BIP38 standard and our security protocol.

BIP38: The Encrypted Private Key Method

Ballet uses the BIP38 (Bitcoin Improvement Proposal 38) standard, which allows for the encryption of private keys with a passphrase. Unlike BIP39, BIP38 does not require users to manage a separate seed phrase. Instead, it provides an additional layer of security by combining encryption with the ease of storing the passphrase on the Ballet card itself. The encryption is done in such a way that even if the private key entropy is exposed, it remains useless without the corresponding passphrase.

Two-Factor Private Keys (2FPK)

Ballet’s Two-Factor Private Keys (2FPK) combine two distinct components: passphrase entropy, which is printed at the bottom of the card, and private key entropy, which is a yellow QR code sticker on the card. Together, these components generate a full private key for your crypto assets. When it's time to transfer or send your cryptocurrency to an exchange, you will need to enter the two components on the app. 

Two-Factor Key Generation (2FKG)

What makes Ballet unique is the process by which these two critical components are generated. The two components of the private key are generated in different geographic locations by separate teams, ensuring that no single entity ever has access to both components. This separation reduces the risk of exposure or compromise during production.

Tamper-Evident Protection

Ballet cold storage cards come with tamper-evident protection. Each card is sealed with a tamper-evident sticker that safeguards the private key components during manufacturing and shipping. Users can easily verify if the card has been tampered with by checking for any signs of peeling or scratching.

The Simplicity of No Passwords

Ballet’s security protocol eliminates the need for passwords and seed phrases entirely. Security is built into the physical product and its secure manufacturing process. By storing the private key entropy and passphrase entropy offline, Ballet significantly reduces the risk of cyberattacks or hacking. This approach not only simplifies crypto management but also makes it accessible to everyone, regardless of technical expertise.