Safeguard your funds like never before with on-chain 2FA

The main scope of the Guardians feature is to protect users against potential attacks. Users can assign another entity as their Guardian, who will also have to sign all transactions from the moment it becomes active.

All that a user has to do is to use an Authenticator app and connect it within their wallet of choice. In the case of the xPortal app, the device’s application will act as the Guardian, circumventing the need for an Authenticator app.

The 20-day cooldown period is designed to safeguard staked funds and relieve pressure on users.

Given that it might take longer than 10 days to safely transfer funds to a secure account, we have extended this period by an additional 10 days.

This not only allows the user ample time to react if their account is compromised, but it also provides a buffer for the user to counteract potential threats.

In the case that your account has been compromised, with our system designed to alert you in such situations, we strongly recommend that you transfer your assets to a secure account. Furthermore, it’s crucial to actively engage with your account. This is necessary to fight potential Guardian changes that an attacker might attempt to execute.

In any case, make sure not to change your Guardian until you manage to transfer your funds to a secure wallet.

There’s no need to panic if this happens. You can change your Guardian to a new authenticator app to which you still have access.

Invisible Guardians is a variation of the Guardians feature tailored for xPortal users. It is specifically designed to maximize security while maintaining the same ease of use xPortal users are accustomed to.

When active, the feature enables an invisible Guardian which is encrypted and stored locally on your device, silently co-signing every transaction.

This acts as an additional security layer and safeguards the account in situations where, one way or another, the secret phrase has been compromised.

If your device gets lost, stolen or broken down and you can’t access the Guardian feature any longer, you will be able to reset it. The reset procedure takes 20 days.

You can still use the MultiversX Wallet via WalletConnect or through the xPortal dApp hub section.

As it happens with any security feature we deploy, Guardians were thoroughly tested both internally and during a public $20,000 USD hacking competition, where hundreds of participants, including security experts, unsuccessfully tried to get the bounty from a guarded account with the 24 words secret phrase leaked publicly.