Xumm Wallet, phone stolen

[Tara]

So my phone most likely got stolen yesterday and I had Xumm installed on it. I still have the seed phrase on my PC safe and will import it on my new phone which will be here the next few days.

What happens with the account on my old phone? I deactivated the SIM Card already, but I guess that is not important for the Xumm Wallet? Will the account on my stolen phone be deactivated when I import the seed phrase on my new phone? I am concerned since the thief only has to crack the 6 digits to access my Xumm and transfer all of my funds off of it (luckily not that much).

Can I activate my Xumm Wallet when I have received my new phone even if my new Sim Card hasn't arrived yet? (Activate Xumm on phone without any Sim Card but a Wifi connection).

 

Thank you

Edited August 11, 2022 by Tara

[at3n]

Importing the seed phrase into the new wallet won't deactivate the old one.

Regarding the 6-digit code, after several wrong attempts Xumm will limit the speed with which you can guess, so there is some protection there. From https://support.xumm.app/hc/en-us/articles/4427109779986-How-secure-is-Xumm- :

Quote

We have configured Xumm to only allow 5 attempts before Xumm starts to add time to the next attempt. After the ninth wrong entry, Xumm requires a delay of 2 hours to input again. That means 12 attempts per day. Now instead of 11 days to try all of the possible combinations, it would take about 83,332 days to try them all... Or about 228 years.

 

Even so, the best practice would be to create a new wallet on your new phone and send everything from the old wallet to the new one after you import the old one.

Whether or not you have the SIM card should make no difference.

[Tara]

Thanks a lot! Ill just create a new account then as soon as my phone arrives and migrate the funds from my old once I imported the seed phrase.

[RambeauTeasebox]

@Tara You can change the regular key pair. (It's a bit of a "power user" move, but I believe that you might be able to also do it with Gatehub's wallet? You might be able to import the original into Gatehub and change the regular key from there.) See here:

https://xrpl.org/assign-a-regular-key-pair.html#:~:text=The XRP Ledger allows an,its relationships to other accounts.

[Tara]

Thanks it is nice to know such an option exists, but a bit too complicated for me atm I think. Still thanks, maybe it will be useful in the future. I certainly need to delete the old adress from my exchanges so nothing gets accidently sent to the old wallet so thats where your method would be more useful.

Btw. everybody should think about what happens if your phone gets stolen. I might have sensitive personal data on my phone which I am not sure of I removed it and now my mind thinks about all the possibilities of social engineering etc. I think in the end I will have to replace all my emails with new ones etc. just to be sure and not paranoid that someday someone gets access to important stuff. Id rather they stole my wallet tbh., much less of a problem than my phone. Jesus Christ its awful.

Edited August 11, 2022 by Tara