TLDR
- Aptos launched a new keyless wallet called Aptos Connect that uses ZK-proofs to verify user identities
- Users can log in with their Google ID without needing hardware security modules, passkeys, or multiparty computation networks
- The wallet aims to simplify Web3 onboarding by allowing one-click account creation with familiar Web2 logins
- It uses OpenID Connect standard and zero-knowledge proofs to link social logins to blockchain accounts
- The wallet relies on the security of the user’s Google account, which could pose risks if compromised
Aptos has unveiled a groundbreaking keyless wallet application called Aptos Connect. This new wallet leverages zero-knowledge proofs (ZK-proofs) to verify user identities, potentially revolutionizing how users interact with decentralized applications (dApps) and manage their digital assets.
Aptos Connect allows users to create and manage Aptos blockchain accounts with a single click using their Google login credentials.
This innovative approach eliminates the need for private keys, seed phrases, hardware security modules, or multiparty computation networks that have long been staples of cryptocurrency wallets.
The next generation of Web3 user onboarding is here with Aptos Connect, a web-based, cross-platform, self-custodial wallet offering keyless, secure access for the ultimate user experience
✅ 1-click account creation via familiar Web2 logins
✅ No private keys or mnemonics to… pic.twitter.com/2lrnct1hYy— Aptos Labs (@AptosLabs) July 3, 2024
The primary goal of Aptos Connect is to simplify the Web3 onboarding process. By utilizing familiar Web2 login flows, the wallet makes it easier for developers to onboard a new generation of users into the world of blockchain.
Users can simply push a “Continue with Google” button and select a Google Account to log into their wallet, providing a seamless experience within decentralized applications.
Aptos Connect achieves this seamless integration by combining the OpenID Connect (OIDC) standard with zero-knowledge proofs.
This unique approach allows the wallet to securely link social logins to blockchain accounts while maintaining user privacy.
The use of ZK-proofs ensures that neither the user’s identity nor the identity of the login provider is revealed in the blockchain data, preventing the association of a particular Google ID with any specific Aptos account.
The development of Aptos Connect was made possible by Aptos Improvement Protocol 61 (AIP-61), which enables transaction authorization through JSON Web Tokens (JWTs) used by major login providers like Google, Facebook, and Apple.
While the current version supports Google logins, Aptos has indicated that Apple ID integration is “coming soon,” providing an alternative for users who prefer not to use Google services.
One of the key advantages of Aptos Connect is its accessibility. As a web-hosted application, it can be accessed through web browsers and works smoothly on different devices without requiring users to download special apps or extensions. This cross-platform compatibility further lowers the barrier to entry for new users in the Web3 space.
Aptos Connect doesn’t require users to have or receive any digital assets before creating an account, nor do they need to connect to a decentralized application immediately. This feature allows users to explore the Web3 environment at their own pace, although some actions within the app may require the use of the Aptos network’s native token.
While Aptos Connect offers unprecedented convenience, it’s important to note that it relies entirely on the security of the user’s Google account to secure funds. The platform’s documentation advises users that if their Google account is compromised, their crypto assets could be at risk. To mitigate this risk, users are encouraged to use an account they do not share with others and to enable two-factor authentication for an extra layer of security.
Despite this potential vulnerability, Aptos argues that many users may be comfortable with this risk, as “all the software on the Internet” currently relies on Web2 login providers to some extent. The trade-off between security and convenience is a ongoing debate in the crypto community, and Aptos Connect represents a bold step towards prioritizing user experience.
Aptos Connect is not the first attempt to simplify crypto wallet access using social logins. Other platforms like Magic Labs’ “Magic Links,” Web3 Auth, and Coinbase’s Smart Wallet have offered similar functionalities.
However, Aptos Connect claims to provide the same convenience without requiring users to click an email link, enter a passkey, or rely on a multi-party computation network.
