Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Importing your account secret might not make sense
Xaman (formerly Xumm) is an excellent application for making payments on the XRP Ledger (XRPL), interacting with the XRPL ecosystem and for safely storing your private keys. For many people, moving their existing XRPL accounts over to Xaman seems like a good idea. Xaman is convenient, easy to use, and very secure, so why not import your account into Xaman to take advantage of all its features...?
Hardware wallets are largely about long term storage of your assets.
A hardware wallet stores the private keys for an XRP Ledger account on a device that is not connected to the internet. Transactions can only be signed on the XRPL account if the signer is in possession of the hardware device. Storing private keys 'offline' limits some potential attack vectors on an account.
Xaman is largely about enabling interaction with the XRP Ledger ecosystem.
Xaman stores the private keys for an XRP Ledger account on a mobile device. (Which is presumably connected to the internet at various times.) It allows a user to sign transactions on their XRPL account via their phone. By storing private keys on a device that is 'on line', it exposes an account to other types of potential attack vectors.
Any time private keys are entered into any software there are potential risks. Spyware, malware, key-loggers, screen capture software, viruses, and many more attack vectors can come into play when entering your private keys.
If you are planning on importing an existing XRPL account into Xaman, please take the time to consider some of the risks associated with doing this.
This section asks questions which are intended to make you think about the nature of your XRPL account, how it was created and how private keys are stored. If you are not sure what the answers are to some of them, contact your current wallet and ask them. You should have a general understanding of these concepts before you import your account into any software application. (or hardware device)
Do you trust the company/service that generated the keys?
What was the source of entropy that was used to generate your keys?
Has that source been audited?
Can your keys be viewed using your current wallet?
Was you account managed by a previous wallet?
Are your private keys stored online? (ie. in a "cloud backup"?)
Which encryption method was used to store your keys?
Are you planning to participate in the XRP Ledger community?
Do you want to be able to access your hardware wallet account using Xaman?
While importing private keys into Xaman is certainly easy to do, you should consider why you are taking the risk of importing them into Xaman when there is a much safer option...🤔
The safest way to protect your funds is to create a new XRPL account using Xaman, then move your assets to your new account. There are a number of benefits to doing this:
Accounts generated by Xaman use a world-class algorithm to generate a set of eight, six-digit Secret Numbers used to access the account. Our algorithm has been audited and tested hundreds of thousands of times. You can trust that your Secret Numbers will not be duplicated by any other software or service.
Xaman only displays the account secret once, when an account is generated. There is no way to access or view it after it is initially displayed. No one, other than you will ever see the account secret after the account is created.
After a new account is generated, the account secret is encrypted and immediately stored in Xaman. The algorithm we use to encrypt it is exceptionally secure.
If something were to ever go wrong, it is much easier to narrow down the source of the issue if the account was generated in Xaman.
Consider the reason why you want to do this. For most hardware wallets, the main selling feature is that they generate and store the private keys for an account 'off line'. This means that an XRPL account managed by a hardware wallet is protected from some potential attack vectors.
By importing your hardware wallet account into Xaman, you are bringing your private keys into a software wallet (Xaman) which is 'on line'. (ie. Xaman is installed on a mobile device which is most likely connected to the internet at various times throughout the day.) Doing this will negate the main selling feature of your hardware wallet. Are you sure this is what you want to do?
If so, this article explains how to do this:
Rather than importing your private key for your hardware wallet account directly into Xaman, it is possible to create a second XRPL account, configure a regular key it, then import your hardware wallet account into Xaman in 'read only' mode. Doing this keeps your secret keys 'offline" but still allows signing access to your account.
As long as you understand that doing this will allow you to access your hardware wallet account directly using Xaman, this is a better option than entering your private key into Xaman.
A regular key will "link" your hardware wallet account to a second XRPL account that will be managed by Xaman. This second XRPL account will not contain any funds and does not need to be activated with 10 XRP, but it will allow you to sign transactions on your hardware wallet account using Xaman.
This means you will have full and direct access to your hardware wallet account with Xaman and you will not need your physical hardware wallet to access the account.
If this is what you would like to do, here are the instructions:
The XRPL accounts that were created during the CasinoCoin swap used a process that some people might find a little difficult to understand. If you ever need to import one of those accounts, there is a special set of instructions to assist you:
How to import your existing XRP Ledger account with a Family Seed
You should see this screen:
Press the Import an existing account button. You will see:
You can import an XRP Ledger account in either of these two modes:
Full access - Choose this option if you would like to be able to interact with your XRPL account. ie. if you would like to create a Trust Line or send XRP to another account.
Read only access - Choose this option if you would like to simply follow the activity of an XRPL account. This option does not allow you to sign transactions on your account.
If you decide to import your account in Read only access mode, stop, and refer to this article:
Otherwise, choose Full access and press the Next button. You should see this screen:
Xaman is compatible with all industry standard account secrets but in this case we will choose Family Seed then press Next.
A Family seed is a string of numbers and letters that is 29 characters long that starts with the letter "s".
For example: s4rj7hy5vdth65f4fy89hg4ffh77hg
Enter your Family seed then press Next.
You should see the following screen:
The following table should help you decide which option is best for you.
Once you decide, select it and press Next then enter the account label and press Next to complete the import process.
How to import your existing XRP Ledger account with a Mnemonic
XRPL accounts that are created using Xumm provide a set of Secret Numbers which allow you to access them.
Since your XRPL account was created using another wallet / platform, you might want to consider creating a new account using Xumm and leave your mnemonic account off-line. If you are interested in learning why, check out this article:
You should see this screen:
Press the Import an existing account button. You will see:
You can import an XRP Ledger account in either of these two modes:
Full access - Choose this option if you would like to be able to interact with your XRPL account. ie. if you would like to create a Trust Line or send XRP to another account.
Read only access - Choose this option if you would like to simply follow the activity of an XRPL account. This option does not allow you to sign transactions on your account.
If you decide to import your account in Read only access mode, stop, and refer to this article:
Otherwise, choose Full access and press the Next button. You should see this screen:
Xumm is compatible with all industry standard account secrets. In this case we will choose the Mnemonic the press Next.
Press Next, I understand
Here is where you can enter your 12, 16, or 24 words. When done, press the Next button.
You should see the following screen:
The following table should help you decide which option is best for you.
Once you decide, select it and press Next then enter the account label and press Next to complete the import process.
How to add a Xaman card
If you are reading this article, you have probably just received your new Xaman Cards and are eager to get them setup and configured properly.
Most people will want to configure one of the cards as a "backup" card. This is an excellent idea because it ensures that if something were to happen to one of the cards, the other card could be used to access the assets in the account.
In order to configure a backup card, you must import two cards into Xaman.
That means that you will need to go through the following steps twice, once for each card.
If you decide to not import two cards into Xaman, you will not be able to run the Tangem Backup xApp or configure a backup card.
1) From the main screen of Xaman, press the Settings button, choose Accounts, then press the the + Add account button.
You should see this screen:
2) Choose Add Tangem card then hold one of the cards up to the NFC reader on your phone.
You should see this message:
3) Tap Generate account then hold the card against the NFC reader on your phone again.
4) Xaman will ask you test the card. Press the Verify button.
5) After you have scanned the card, Xaman will display the r-address that the card belongs to. Press the Confirm button.
6) Enter the account label for the card then press the Next button.
You have successfully imported one of your aman Cards into Xaman!🥳
If you are planning to configure a backup card, you are going to need to repeat all of the steps above with a second card. If you do not import a second card, you will not be able to configure a backup card.
If your plan is to configure a backup card, only one of the cards will need to be activated. The second card does not need to be activated with 10 XRP.
This article explains how this works:
From the main screen of Xaman, press the Settings button, choose Accounts, then press
Please ensure that r-address that is displayed is the one that you intend to import. If it is not correct, please press the button, then double check and re-enter your Family seed. When the correct r-address is displayed, press the Confirm button.
Option |
---|
If you decide to proceed, launch Xumm then press the button then press
Please ensure that r-address that is displayed is the one that you intend to import. If it is not correct, please press the button, then double check and re-enter your Mnemonic words. When the correct r-address is displayed, press the Confirm button.
Option |
---|
Standard security is a great option your daily spending account. You can sign with your 6 digit passcode or enable biometrics and sign with your face/finger print. |
Extra security allows you to enter a separate signing password. This is the best option for your long term storage account. |
Standard security is a great option your daily spending account. You can sign with your 6 digit passcode or enable biometrics and sign with your face/finger print. |
Extra security allows you to enter a separate signing password. This is the best option for your long term storage account. |
Importing an XRPL account created on a hardware wallet
It is important to understand what this process does because it changes the access to the XRP Ledger (XRPL) account managed by a hardware wallet.
Hardware wallets are largely about long term storage of assets. A hardware wallet stores the private keys for an XRPL account on a device that is not connected to the internet. The hardware wallet can only sign transactions on an XRPL account if the hardware device is physically present. Storing your private keys offline limits some potential attack vectors on your account.
Xaman (formerly Xumm) is largely about enabling interaction with the XRP Ledger ecosystem. Xaman stores the private keys for an XRPL account on a mobile device, which is connected to the internet.
It allows you to sign transactions on your XRPL account on your phone. By storing your private keys on a device that is 'online', it exposes your account to other types of potential attack vectors.
By following these instructions, you will be able to access all of your XRPL assets stored in your hardware wallet using Xaman. This means that you will not exclusively need your hardware wallet to access your XRP. You will be able to access it with Xaman in addition to being able to access it with your hardware wallet.
We strongly recommend you read this article before continuing:
1) On your phone, create a new Full-Access XRP Ledger account in Xaman.
1.1) It is not necessary to fund (activate) this account as all it will do is sign transactions.
2) Press the Show account QR button. You should see a screen that looks like this:
3) Get your hardware wallet, go to a computer and select this link to go to XRP Tool Kit.
4) Sign into XRPToolkit.com with your hardware wallet then choose the Account menu and select Signers.
5) In the Assign Regular Key section, press the QR code button in the Regular Key field, then scan the QR code from Xaman on your phone. (The one from Step 2 above.)
Alternatively, you can manually enter your Xaman r-address in the Regular key field.
7) Sign the transaction with your hardware wallet.
8) On your phone, import your XRPL account created on your hardware wallet into Xaman in read only mode.
Importing your hardware wallet account into Xaman in read only mode does not require entering your mnemonic (private key) into Xaman. It only requires that you enter your r-address (public key).
If you successfully followed the above instructions, you are able to sign transactions on your hardware wallet account, using the new XRPL account created in Xaman.
This only works if both accounts are in Xaman. Xaman will see that the read-only account has a Regular Key assigned and offer the option to use the Regular Key to sign transactions for the read-only account if the Regular Key account is also in Xaman.
Since you imported the hardware wallet account into Xaman in read only mode, the private key was not brought 'online' and still remains on your hardware wallet.
If you are interested in learning more about how regular key pairs work on the XRP Ledger, please visit this site:
How to import your existing XRP Ledger account with Secret Numbers
You should see this screen:
Press the Import an existing account button. You will see:
You can import an XRP Ledger account in either of these two modes:
Full access - Choose this option if you would like to be able to interact with your XRPL account. ie. if you would like to create a Trust Line or send XRP to another account.
Read only access - Choose this option if you would like to simply follow the activity of an XRPL account. This option does not allow you to sign transactions on your account.
If you decide to import your account in Read only access mode, stop, and refer to this article:
Otherwise, choose Full access and press the Next button. You should see this screen:
Xumm is compatible with all industry standard account secrets. In this case we will choose the Secret Numbers.
When you created your XRP Ledger account using Xumm, you would have received a set of secret numbers consisting of 8 rows, (A-H), each with 6 digits. You will need to have those numbers in order to proceed.
We are going to choose the Secret numbers option and press Next.
Enter the secret numbers for your account using the buttons and press the Next button when complete.
Next you should see the following screen:
The following table should help you decide which option is best for you.
Once you decide, select it and press Next then enter the account label and press Next to complete the import process.
How to import an XRP Ledger account in Read Only mode
You can import an XRP Ledger account in either of these two modes: Full access - Choose this option if you would like to be able to interact with your XRPL account. ie. if you would like to create a Trust Line or send XRP to another account.
Read only access - Choose this option if you would like to simply follow the activity of an XRPL account. This option does not allow you to sign transactions on your account.
Most people choose to import their accounts with Full access but if you are interested in just monitoring an account's activity, you can import in Read only mode.
1) Launch Xumm then press the Settings button, choose Accounts then press the + Add account button.
You should see this screen:
Press the Import an existing account button.
Select Read only then press Next.
Enter the r-address of the account you would like to import then press Next.
Enter the label of the account then press Next.
About importing your existing XRP Ledger account
You can import an XRP Ledger account in either of these two modes: Full access - Choose this option if you would like to be able to interact with your XRPL account. ie. if you would like to create a Trust Line or send XRP to another account.
Read only access - Choose this option if you would like to simply follow the activity of an XRPL account. This option does not allow you to sign transactions on your account.
Most people choose to import their accounts with Full access so they can interact with the XRP Ledger.
As well, Xumm is compatible with all industry standard account secrets. Choose the appropriate one which applies to your account.
If you have a Xumm (Tangem) card, this article explains how to import it:
If you do not have your CasinoCoin secret mentioned above, the CasinoCoin team has documented a process to access accounts created during the CSC swap. You can find the instructions here:
From the main screen of Xumm, press the button then press
Please ensure that r-address that is displayed is the one that you intend to import. If it is not correct, please press the button, then double check and re-enter your secret numbers. When the correct r-address is displayed, press the Confirm button.
Option | Explanation |
---|---|
If you have access to your old CasinoCoin wallet secret in the form of a code that starts with a lower case s, you can import your CasinoCoin wallet secret .
If you run into any trouble with the recovery process, please contact the CasinoCoin support staff here:
Standard security is a great option your daily spending account. You can sign with your 6 digit passcode or enable biometrics and sign with your face/finger print.
Extra security allows you to enter a separate signing password. This is the best option for your long term storage account.