Modules

The Crypto Wallet is always strictly personal, and only the owner can access it when they know the access code. Both conditions must be met for access, as access to the crypto wallet is linked to both the username and the private PIN.

What the Crypto Wallet is Used For

The Crypto Wallet stores access codes for data vaults. For each vault that you get access to, the access is saved in your crypto wallet.

To access a data vault, you must first unlock the crypto wallet on your device. This allows the app to retrieve the codes needed to decrypt the contents of the data vaults. Without this, access is not possible.

How the Crypto Wallet is Secured

To unlock the crypto wallet, several passwords are needed, each stored separately:

You need the wallet itself, which is either on your device or encrypted and stored on a server.
You need a code that is generated for your organization. No one outside your organization can access it. The organization's secret code is stored separately from the encrypted wallets.
You must use your username. The wallet cannot be misused under a different account.
You must know your PIN, which only you know, and no one else.

The organization's code and your own are combined to form part of the password for strong AES encryption.

Why Does the Password Contain So Many Components?

The multiple components of the password are designed to prevent unauthorized access not only by external attackers but also by potential administrators who have access to the system, or by someone who might manage to transfer your wallet to another account (which technically cannot be ruled out, such as by assigning your account to someone else).

It’s Good to Know

How is it possible for the vault owner to revoke my access to the vault? Does that mean they can access my wallet?

No one can access your wallet, nor can anyone take access from it. However, the vault administrator can revoke your access. In order to access a data vault, you must have rights (granted by the administrator) and the corresponding access code.

When the administrator revokes your rights, the code in your wallet remains, but you can no longer use it. It's like having a key to a door, but there's still a gate in front of the door, and you don't have the key for it. The key will be removed from your wallet automatically once the crypto wallet is unlocked. After unlocking, the app checks which vaults you have access to and removes keys from those you no longer have access to.

How do I access the crypto wallet on another device? Is it compromised during transfer?

You only have one crypto wallet, but you can access it on any trusted device. The wallet is always encrypted, and it is only unlocked when it's necessary to use one of the keys or to insert a new key. When it's stored on a server, it cannot be decrypted.

Is the security of the crypto wallet compromised if I use my login password as the access code?

The system never stores passwords unencrypted. Therefore, it doesn’t matter to the system if you use the same password. However, we strongly recommend against it. Security is reduced on your side—if someone watches you log in to AyMINE, they could record your password and gain access to the system and your wallet. If you use a different password for the wallet, this risk is eliminated.

How much does the security of the wallet depend on the length of the password?

As with any password, if someone gets the chance to try passwords via brute force, a shorter password could eventually be guessed. We recommend a password of at least 6 characters; 4 characters is the minimum, and anything shorter is not allowed by the system.

Does the PIN have to be numeric?

The password can consist of any characters, including diacritics and special characters, so you are not limited to numbers.

Does the app store the PIN anywhere?

As long as the wallet is unlocked in the app, the decoding string is stored in the app's memory. It is automatically removed when the app hasn’t been used for 10 minutes. The app then locks and removes access to the crypto wallet. For new access, you must re-enter the password.

The login PIN never leaves your device—it is neither transmitted to the server nor stored anywhere that external apps or malicious code (such as in an embedded page or JavaScript) could access it. You should also never share your PIN with anyone. Administrators should never request it for any purpose.

Why is access to the crypto wallet strictly limited to a secure device?

If you access AyMINE from an unknown browser, it is not possible to ensure that the data you retrieve from the data vault will remain secure. The restrictions on working with the crypto wallet serve primarily to protect the vaults.

Can I store anything else in the crypto wallet? For example, bitcoins?

No, the crypto wallet can only be used for keys to data vaults and nothing else. However, in AyMINE, you can set up your own data vaults and store any data in them, including potentially bitcoins. Note that AyMINE and the data vaults are not designed for storing cryptocurrencies, and the operator does not take responsibility for any damages.