No Option to Delete Additional DID Passports + Suggestion to Limit Passports to 2
🐛 Summary
The user has 5 DID Passports but cannot delete additional passports beyond the primary one. To mitigate malicious activity (e.g., spam, phishing, or account abuse), we suggest limiting passport creation to 2 per user and enforcing deletion of unused passports.
🔁 Steps to Reproduce
- Open the DID Wallet (desktop or mobile app).
- Navigate to Account Settings or Passport Management.
- Locate the list of 5 passports.
- Look for a "Delete" option for any passport (excluding the primary one).
- Observe that no deletion option is available for additional passports.
📉 Severity
Medium – Impacts user ability to manage passports and increases risk of malicious activity.
📝 Additional Notes
- The user has 5 passports but cannot delete any beyond the primary one.
- No error messages are shown, but the deletion option is absent from the UI.
- Reproducible in [specify device/browser/network if known].
🛠️ Expected Behavior
- Users should be able to delete additional passports (non-primary) via a visible option in the interface.
- A confirmation prompt should appear before deletion to prevent accidental removal.
🧪 Actual Behavior
- No deletion option is available for additional passports.
- The interface only allows viewing or editing passports, not removing them.
🧩 Suggested Enhancement: Limit Passports to 2 per User
Rationale
To prevent malicious activity (e.g., spam, phishing, or account abuse), we propose:
- Hard Limit: Allow users to create only 2 passports (1 primary + 1 secondary).
- Deletion Requirement: To create a new passport, users must delete an existing one.
- Security Benefits:
- Reduces the attack surface for phishing or fake account creation.
- Simplifies user management and reduces accidental misuse.
Implementation Steps
- UI/UX Update:
- Add a "Delete Passport" button for non-primary passports.
- Show a warning message when the user reaches the 2-passport limit.
- Backend Enforcement:
- Block passport creation if the user already has 2 passports.
- Require deletion of an existing passport before allowing a new one.
- User Education:
- Add a tooltip or help section explaining the 2-passport limit and deletion process.