No Option to Delete Additional DID Passports + Suggestion to Limit Passports to 2
๐ย Summary
The user hasย 5 DID Passportsย butย cannot delete additional passportsย beyond the primary one. To mitigate malicious activity (e.g., spam, phishing, or account abuse), we suggestย limiting passport creation to 2 per userย and enforcing deletion of unused passports.
๐ย Steps to Reproduce
- Open theย DID Walletย (desktop or mobile app).
- Navigate toย Account Settingsย orย Passport Management.
- Locate the list ofย 5 passports.
- Look for aย "Delete"ย option for any passport (excluding the primary one).
- Observe thatย no deletion option is availableย for additional passports.
๐ย Severity
Mediumย โ Impacts user ability to manage passports and increases risk of malicious activity.
๐ย Additional Notes
- The user hasย 5 passportsย but cannot delete any beyond the primary one.
- No error messages are shown, but the deletion option is absent from the UI.
- Reproducible in [specify device/browser/network if known].
๐ ๏ธย Expected Behavior
- Users should be able toย delete additional passportsย (non-primary) via a visible option in the interface.
- A confirmation prompt should appear before deletion to prevent accidental removal.
๐งชย Actual Behavior
- No deletion optionย is available for additional passports.
- The interface only allows viewing or editing passports, not removing them.
๐งฉย Suggested Enhancement: Limit Passports to 2 per User
Rationale
To prevent malicious activity (e.g., spam, phishing, or account abuse), we propose:
- Hard Limit: Allow users to createย only 2 passportsย (1 primary + 1 secondary).
- Deletion Requirement: To create a new passport, users mustย delete an existing one.
- Security Benefits:
- Reduces the attack surface for phishing or fake account creation.
- Simplifies user management and reduces accidental misuse.
Implementation Steps
- UI/UX Update:
- Add aย "Delete Passport"ย button for non-primary passports.
- Show aย warning messageย when the user reaches the 2-passport limit.
- Backend Enforcement:
- Block passport creation if the user already has 2 passports.
- Require deletion of an existing passport before allowing a new one.
- User Education:
- Add a tooltip or help section explaining the 2-passport limit and deletion process.