Jack Dorsey, Block and the Perils of Making Crypto User-Friendly

Everyone seems to agree that crypto needs to improve its user experience. But at what cost?

AccessTimeIconMar 14, 2022 at 8:43 p.m. UTC
Updated May 11, 2023 at 6:15 p.m. UTC
AccessTimeIconMar 14, 2022 at 8:43 p.m. UTCUpdated May 11, 2023 at 6:15 p.m. UTCLayer 2
AccessTimeIconMar 14, 2022 at 8:43 p.m. UTCUpdated May 11, 2023 at 6:15 p.m. UTCLayer 2

Last July, payments startup/giant (can you be both?) Square announced that it would be developing a hardware cryptocurrency wallet. The prospect of a wallet designed by the same folks who build the world’s fastest-growing point-of-sale technology promised exciting advances in ease of use and adoption. And that was months before Jack Dorsey flipped the tech world table by resigning from Twitter to focus on Square (now Block) full time, even further upping the stakes.

But, for perhaps the first time in Dorsey’s yearslong flirtation with Bitcoin (“crypto,” not so much), there’s a significant disconnect between his plans and crypto long-timers’ preferences. In a Friday blog post, Block announced that its hardware wallet would make fingerprint identification the primary and default method for users to access their funds. Block does say it will “evaluate additional access methods that customers could opt into.”

At least in the case of consumer goods like cellphones, the motivation for adding biometric access control is usually simple convenience, but the ultimate implications could be dire. Another Web 2.0 holdover, Sam Altman, a former president of Y Combinator, a firm that helps funds tech startups, introduced a token called Worldcoin over the summer of 2021, and critics including Edward Snowden pointed out that the scheme would risk exposing users’ biometric data with potentially severe and permanent consequences for victims. When the ruthless capitalists at the American Enterprise Institute think your plan is anti-social, you know you’re in trouble.

To be fair, the Block plan is different from Worldcoin’s in crucial ways that make it more defensible. In part because the planned wallet is a single-user device, it will be able to create and store its biometric credentials locally, as your phone does. Worldcoin, by contrast, seemed likely to require a centralized database of iris-scan hashes, an absolute five-alarm fire of poor security architecture.

But even local processing and storage is a real risk – ultimately, no local data that can be reached via the internet should ever be considered truly secure. And the literally lifelong consequences of a compromised fingerprint make even the remotest exposure worth seriously interrogating.

Equally worrisome, making a fingerprint the main way of authorizing a crypto wallet could mean less emphasis on private key management. That could introduce an added risk vector for users: if your hardware wallet is the only home of your private keys, and that hardware is controlled by a fingerprint, the risk of losing all your money just went up rather than down.

Block seems well aware of the risks here, based on both the content and timing of the announcement. “We're aware of limitations [of fingerprint security] we'll need to design around,” the announcement states. And in the communications business, Fridays are when you drop news you don’t want anyone to pay too much attention to – reporters are largely finishing up their assignments and looking forward to a blissful weekend. So it’s a good bet Block was seeking to minimize blowback here.

All that said, Block is trying to thread an extremely tricky needle, and its current plans deserve a thoughtful rather than knee-jerk response. The announcement post makes clear the priority was to design a wallet that can be used “securely, but with ease,” balancing user experience with safety.

“We don’t want to force new behaviors on customers with a novel interface on the hardware component of the wallet we’re building,” the announcement continues. “Instead, making the mobile application the center of the experience will lead to familiar, intuitive interactions.”

For better or worse, we’re very used to using fingerprint unlocks on smaller devices. So using them makes absolute sense from a Silicon Valley hardware designer’s perspective. The presumption that something should be a mass-market product, ideally usable by even the slowest kids on the bus, is baked into the business models and culture of even relatively agile entities like Block.

The logic also, however, aligns with many calls within the crypto industry to prioritize making user experience better and more intuitive, not just for wallets but also for decentralized exchanges (DEXs) and everything else. The problem, as crypto and security experts including MetaMask’s Taylor Monahan have pointed out, is that a smooth user experience is almost inextricable from security risks. In fact, she specifically cites another “ease-of-use” feature that led people to not save their private keys properly. It's about a feature of an early version of MyCrypto/MEW, the wallet Monahan built before joining Metamask recently. Specifically, the feature was an automatic download/display of all the wallet information that people apparently forgot to write down pretty often.

Ultimately, there will eventually be crypto products that strike the right balance between security and usability. But frankly, I think companies rushing in that direction now are shortchanging the entire ecosystem by de-emphasizing education. In fact, the assumption that front-end design can make a crypto system just as smooth and effortless to use as a Web 2.0 system may well prove to be fundamentally flawed: The complexity of crypto is inextricable from its decentralization, and methods of “abstracting away” that complexity almost always add new attack surfaces for people who want to take your money.



Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.


Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk offers all employees above a certain salary threshold, including journalists, stock options in Bullish Group as part of their compensation.

David Z. Morris

David Z. Morris was CoinDesk's Chief Insights Columnist. He holds Bitcoin, Ethereum, and small amounts of other crypto assets.