"Don't put all your eggs in one basket": How Cryptocurrency Users Choose and Secure Their Wallets

Title of the Paper

“Don’t Put All Your Eggs In One Basket”: How Cryptocurrency Users Choose and Secure Their Wallets

Paper Information

• Research Area: User behavior studies, usability, and security (focused on cryptocurrency wallets)
• Keywords: Cryptocurrency, blockchain, crypto wallets, security, privacy, user behavior

Research Background and Issues

• Identified Problems or Challenges:

  • The wide variety of cryptocurrency wallets, including hardware wallets, software wallets, custodial wallets, and non-custodial wallets, creates decision-making challenges for users.
  • Misunderstandings or concerns about privacy, security, and usability may hinder wallet adoption and effective usage.
  • There is insufficient research on why users choose different types of wallets and the security measures they adopt.

• Importance of the Problem:

  • Choosing a wallet type is one of the most critical decisions directly related to cryptocurrency security.
  • In-depth research on user behavior can help improve wallet design, thereby enhancing user experience and security.

• Research Motivation and Related Work:

  • Previous studies have largely focused on users’ general perceptions of cryptocurrency and risk awareness, with little attention to how users select wallets.
  • There is a near absence of specialized studies on smart contract wallets or how users manage multiple wallets simultaneously.

Proposed Solution

• Proposed Methods and Solutions:

  • Conduct semi-structured interviews with 24 users of various cryptocurrency wallets to explore their reasons for wallet selection and their understanding of security and privacy.
  • Investigate diverse user behaviors, security practices, and potential design recommendations in wallet usage.

• Innovative Aspects of the Solution:

  • This is the first systematic study from a user behavior perspective to explore the use cases of smart contract wallets and how users choose wallets based on security and convenience needs.
  • Offers a multifaceted analytical perspective, addressing device preferences (PC and mobile), multi-wallet usage, the influence of socio-cultural factors on wallet selection, and evaluations of social security features in wallets.

• Implementation Steps and Key Techniques:

  1. Interview Data Collection:
     • Conduct semi-structured interviews via Zoom.
     • Recruit participants through various methods (e.g., social media, blockchain forums) to ensure sample diversity.
  2. Data Analysis:
     • Use thematic analysis to extract patterns in user wallet selection and security challenges.
     • Categorize user behaviors and technical preferences, exploring the underlying socio-cultural and technical factors.

Research Findings

• Specific Findings:

  1. Motivations for Choosing Different Wallet Types:

     • Mobile wallets are suitable for simple transactions, offering excellent portability and privacy.
     • PC wallets are preferred for high-risk or complex on-chain operations due to enhanced screen displays and third-party security extension support.
     • Smart contract wallets are favored for features like social recovery, though users have limited understanding of these functionalities.
     • Hardware wallets, despite their reputation for security, are often abandoned due to complex interfaces and concerns about phishing attack protection.

  2. Multi-Wallet Behavior:

     • Over 95% of participants tend to use multiple wallets simultaneously, distributing assets to mitigate risks associated with single points of failure.
     • Wallet type selection is often matched to task types, such as using custodial wallets for transactions and self-custodial wallets for complex operations.

  3. Socio-Cultural Influences:

     • Recommendations from friends and community influence wallet choices significantly.
     • Certain wallets’ cultural adaptability enhances trust among specific user groups.

  4. User Security Perceptions and Strategies:

     • Perceptions of wallet security influence usage frequency and methods.
     • Users prefer browser extensions (e.g., Blowfish, Fire) to enhance transaction environment security.
     • Phishing and scams are major security threats for self-custodial wallets, while the social security features of smart contract wallets partially alleviate user concerns.

• Advantages:

  • Provides a comprehensive view of how usability, security, and socio-cultural factors intersect with different wallet categories.
  • Highlights the complexity of wallet usage in work contexts, addressing gaps in existing literature.

• Experimental or Evaluation Results:

  • Results indicate that design improvements (e.g., optimizing social recovery features, clearer warning messages, and incentive mechanisms) can significantly enhance users’ trust and effective use of cryptocurrency wallets.

• Limitations and Future Directions:

  • Limitations:
    • All participants were from the United States, lacking perspectives from diverse geographical regions.
    • The small sample size does not fully capture the diversity of cryptocurrency users.
  • Future Work:
    • Conduct large-scale cross-cultural user studies to better understand regional differences and behavioral characteristics.
    • Explore design trade-offs in social recovery and dynamic permission management between wallets to further optimize user experience and security.

Design Recommendations

1. Optimization of Social Recovery Features:

   • Enhance layered governance of recovery functions, allowing users to allocate permissions based on varying trust levels.
   • Provide transparency for social security features (e.g., records of actions by guardians) and establish incentive mechanisms to encourage guardianship roles.
   • Integrate zero-knowledge proofs to protect the privacy of guardians.

2. Improvement of Wallet Security Warnings:

   • Add contextual information to warnings, such as simulations of transaction outcomes and detailed explanations of risk sources.
   • Integrate blockchain trustworthiness variables (e.g., transaction volume, contract code verification status).

3. Verification and Remediation Features for Phishing and Scams:

   • Design anomaly detection algorithms to proactively pause suspicious transactions and provide rollback support.
   • Introduce personalized educational services to help users better understand transactions and security practices.

Conclusion

This study provides an in-depth exploration of cryptocurrency wallet users’ behavioral patterns and security needs, offering significant design improvement directions by integrating social, technical, and cultural contexts. It paves the way for future research on enhancing the user experience and security of cryptocurrency wallets.