The security vs. usability dilemma arises from the trade-off where increased security often comes at the expense of usability.
“Sign in with Google” wallets are seen to have reached the pinnacle of usability, abstracting the private key from users completely and allowing for easy recovery. Whilst quite usable, unfortunately your assets are as secure as your email — most certainly less secure than a good custodian.
(Gnosis) Safe exists on the other end of the continuom, easily providing the best security of any wallet today. The high friction of coordination between multiple aligned parties is what makes it so secure, yet so unusable for day-to-day transactions.
There exist a multitude of self-custodial solutions between these where many users find themselves, notably hardware wallets; solutions not truely convenient, secure or even practical for most. So impractical that 90% of users remain on centralized exchanges.
These challenges have significant downstream effects on the onchain ecosystem and even the premise of the industry.
Our vision is to make self-custody the default — more secure and usable than any custodial solution, and completely open-source. We are making this a reality by embracing the dilemma to support real-world users who require both usability and security.
Zallo accounts use security policies that specify the permissions that a transaction may use and the approvals required. This allows for an account to require approval proportional to the risk of the transaction.
- High usability (low security) for low risk transactions
- High security (low usability) for high risk transactions
A variety of approval methods are supported for you to combine to find the balance that’s right for the security policy: iOS, Android, web, Ledger hardware wallets, Sign-in with Google & Apple, friends & family, and more.
Join us in our journey to redefine self-custody. Try Early Access on the zkSync Era Testnet and help us make self-custody the default.
Connect with us on Twitter @ZalloLabs or via email at hello@zallo.io