Sign-in with Ethereum

Understanding "Sign in with Ethereum"

Sign in with Ethereum (SIWE) is a method that allows you to log into various applications using your Ethereum wallet, enhancing both security and privacy. It leverages your existing wallet to authenticate your identity without needing to create new usernames or passwords for each service you use.

Wallet Connections

How Does It Work?

1. Wallet Connection: You connect your Ethereum wallet (like MetaMask) to Zipwire or any other service supporting SIWE.

2. Authentication Message: The application sends a message to your wallet, which includes details about what you're logging into.

3. Signature: You sign this message with your wallet. This signature acts as your authentication, proving you own the wallet without revealing your private key.

4. Access Granted: Upon verifying the signature, the application grants you access, often without needing to enter any personal details other than your public wallet address.

Benefits of SIWE

• Security: Your private key never leaves your device; only a signature of a message does.

• Privacy: You control what personal information is shared. Often, just your wallet address is used, which is pseudonymous.

• Decentralization: It promotes a decentralized identity model where you, not the services, control your identity.

Industry Problem: Most dApps store wallet addresses directly in their databases for both authentication and blockchain interactions. This creates a single point of failure - if their database is compromised, your wallet address gets exposed and linked to your real identity, potentially revealing your entire blockchain transaction history.

Relation to WalletsSIWE is closely tied to how wallets function:

• Externally Owned Accounts (EOAs): Zipwire uses the EOA model for SIWE, meaning only wallets where you control the private key (like MetaMask) can be used. Learn more about Wallets here (#what-is-a-wallet).

• Smart Wallets: While Zipwire currently does not support Smart Wallets for SIWE, these wallets could potentially be used in the future as they evolve to include features like account abstraction for authentication.

Using SIWE with Zipwire

• Connect Your Wallet: On the Zipwire login page, select the option to "Sign in with Ethereum." This will prompt you to connect your wallet via a browser extension like MetaMask.

• Sign the Message: You'll be asked to sign a message confirming your login. This message typically includes the domain of Zipwire, a "nonce" (a random number to prevent "replay" attacks), and other details.

• Enjoy Seamless Access: After signing, you'll be logged in, and you can manage your attestations or any other features Zipwire offers.

Important - When you login on another device, you'll need that wallet extension installed and to remember which of your accounts you used, else Zipwire will treat you as a brand new user.

Security Considerations

• Always Check the Message: Before signing, ensure the message is from Zipwire and contains the expected details to prevent phishing.

• Manage Your Wallet Keys: Keep your wallet's private keys secure. If compromised, anyone could sign in as you.

• Revoking Access: If you ever lose trust in an application or suspect foul play, you can always disconnect your wallet, revoking the app's permission to use your signature for authentication.

Troubleshooting SIWE

• Reload (F5) the Zipwire page as a first step.\

• Wallet Not Connecting: Ensure your wallet extension is up to date and properly installed. Also, check if Zipwire supports your specific wallet version.

• Signature Issues: If signing doesn't work, try clearing your cache or using a different browser. Sometimes, network issues can interfere.

If you run into any problems or have further questions about using SIWE with Zipwire, please contact our support team for assistance.