When you log into blockchain.info - you enter the password on the client side.

Does the password remain stored in a local javascript variable on the client side after the login process is over?

If yes, does that count as real a security risk? What kind of attack vectors does that open you to?

If not, how else does the wallet update the server side state?


1 Answer 1


I guess that it must have, because it updates the server after any modifying operation is made, without asking for a password.

That is DannyHamilton claims as well. See also.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.