因為這是刻意的取捨,不是疏忽。大家熟悉的那種 2FA(簡訊驗證碼或驗證器應用程式)是為了補強人類自選的弱密碼而存在的,而且仰賴一個放在伺服器上的共享祕密與復原管道。那正是助憶詞模式移除掉的攻擊面:你的裝置透過簽署挑戰值證明自己持有金鑰,所以我們的伺服器只會收到公鑰與簽章,永遠收不到助憶詞,也不存在密碼雜湊。硬要疊一層驗證碼上去,等於把這個設計刻意避開的伺服器端機制又搬回來,對防止猜測卻毫無新增助益,因為 128 位元早已關上那扇門。
在這裡保護你的東西是本機的,而且每個方案都有:應用程式鎖定(PIN 碼)與生物辨識解鎖,會擋在別人撿起的裝置前面。真正值得防的風險是釣魚,以及助憶詞被人從肩後看見,而不是被猜中。所以請把助憶詞存進密碼管理器,除了 app 之外哪裡都不要輸入。
除此之外,助憶詞就是鑰匙,所以請在建立帳號當天就備份:存進信譽良好的密碼管理器,或列印、抄寫下來,把那份副本收在安全的地方。除了應用程式本身,永遠不要把它貼進任何其他地方。
說明與常見問題
解答與逐步指南:安全性、同步、定價,以及從其他應用程式搬家。
你會在幾秒內得到答案,不必等我們回覆。你的助理會一次讀完 92 則解答和所有匯入指南,因此能把它們串起來、追問你的問題,並用你熟悉的說法解釋。我們完全看不到這些內容,因為我們沒有聊天機器人。
Answer my questions about PrivacyNotes using only its help center, its changelog and its security documentation. Start here: https://privacynotes.app/llms-index.txt It lists every question with the page that answers it. Fetch the one or two that match mine. If you can only make one request, fetch https://privacynotes.app/llms-full.txt instead. If you cannot fetch a .txt or .md file, read https://privacynotes.app/tw/help, https://privacynotes.app/changelog and https://github.com/LifetimeLabsDev/PrivacyNotes.app instead. For what changed, or where something moved, fetch https://privacynotes.app/changelog.md. For how the encryption works, what the server can read, or how to check any of it yourself, fetch https://privacynotes.app/docs/index.md and follow it to one of the documents it lists. That index is a router: cite the document, never the index. Rules: - Use only those pages. If they do not answer something, say so instead of guessing. - Never invent a feature, a menu path, a price, or a limit. - End your reply with the "Source:" URL from the page you used, exactly as written. - Answer in the same language as my question. - Never ask me for my recovery phrase, my PIN, or the contents of a note. If no question follows, ask me what I would like to know. My first question:
絕對不要把復原助憶詞、PIN 碼或筆記內容貼給 AI。