Require email/phone verification during recovery setup

Overview

Requiring verification of the email account or phone number used for recovery will ensure the user has entered it correctly, and that they actually have access to the email/phone.

Additionally, we’ve received feedback from users the current flow feels unusual.

Proposed User Flow

1. User enters email/phone, selects “Verify” button
   • User is redirected to /verify
2. User receives message with a confirmation code
3. User enters code, selects “Confirm” button
   • Option to “Setup Seed Phrase” if they cannot confirm

[Patrick1904]

Any context as to why this was closed? @vgrichina @kcole16

MVP was merged https://github.com/near/near-wallet/pull/559

[Patrick1904]

We’re pretty much done implementing MVP for this and it involves an input to enter the security code that we sent to your email/phone.

We currently cannot offer a link option because if you enter the wrong email, the person who owns that email can click the link and then automatically get a magic link sent to them.

We’ll get a testing env setup soon and can make any adjustments to the design then.