<p>Ripple.com does not store any information about the users of the ripple network. Instead if you want to make transactions using only a username and password you must store your secret key in an encrypted blob vault, using your username and password credentials to create the encrypted cypher-text.</p>

<p>The web wallet app available at ripple.com/client uses such a blob vault to store and retrieve your ripple secret key. Then behind the scenes it signs transactions to the ripple network using your key. The provider of your vault is configurable and if you desire you may implement your own blob vault by following the vault protocol and by consulting the official open source <a href="https://github.com/ripple/ripple-blobvault" rel="nofollow">blob vault code on github</a>.</p>

<p>Of course in your own ripple applications you can use whichever protocol you like to store and retrieve your secret key using a username and password for encryption. Remember it is not possible to make transactions in the ripple ledger without a signature from your account secret key.</p>

CC BY-SA 3.0
2013-12-31T01:40:54.073Z
2013-12-31T01:40:54.073Z
Steven Zeiler
<p>Usernames and passwords are client wallet functions. They have no meaning to the Ripple network and servers would have no idea what to do with them.</p>

<p>In fact, servers do not have permission to obtain encrypted wallets because if they did, they could attempt to brute force decrypt them, negating the security advantages of the blob vault. By design, is is as difficult as possible to ask someone else to obtain your wallet, purportedly on your behalf. This is necessary to prevent malicious web sites from sending javascript to your browser that causes it to brute force other people's wallets as you browse the Internet.</p>

CC BY-SA 3.0
2013-12-06T08:08:13.870Z
2013-12-06T08:14:20.393Z
2013-12-06T08:14:20.393Z
David Schwartz
<p>I'm googling, and looking for such option, to authenticate to ripple.com with out secret key, but username and password.</p>

<p>I've found only with secret key:</p>

<pre><code># curl -X POST -d '{ "method" : "sign", "params" : [ { "secret" : "snoPBrXtMeMyMHUVTgbuqAfg1SUTb", "tx_json" : {"TransactionType":"Payment",  "Account":"rHb9CJAWyB4rj91VRWn96DkukG4bwdtyTh", "Amount":"200000000", "Destination":"r3kmLJN5D28dHuH8vZNUZpMC43pEHpaocV" }} ] }' http://s1.ripple.com:51234 
</code></pre>

<p>How properly to authenticate with username and password only? </p>

<ripple>
Is there api for ripple.com to authentificate with username & password?
user10274
# Is there api for ripple.com to authentificate with username & password?

(Asked by: username_0 on 2013-12-06)

I'm googling, and looking for such option, to authenticate to ripple.com with out secret key, but username and password.

I've found only with secret key:

```
# curl -X POST -d '{ "method" : "sign", "params" : [ { "secret" : "snoPBrXtMeMyMHUVTgbuqAfg1SUTb", "tx_json" : {"TransactionType":"Payment",  "Account":"rHb9CJAWyB4rj91VRWn96DkukG4bwdtyTh", "Amount":"200000000", "Destination":"r3kmLJN5D28dHuH8vZNUZpMC43pEHpaocV" }} ] }' http://s1.ripple.com:51234 

```

How properly to authenticate with username and password only?

**Tags:** ripple


---

## 2 answers

### Answer by username_2 on 2013-12-06. Score: 4 | Accepted answer

Usernames and passwords are client wallet functions. They have no meaning to the Ripple network and servers would have no idea what to do with them.

In fact, servers do not have permission to obtain encrypted wallets because if they did, they could attempt to brute force decrypt them, negating the security advantages of the blob vault. By design, is is as difficult as possible to ask someone else to obtain your wallet, purportedly on your behalf. This is necessary to prevent malicious web sites from sending javascript to your browser that causes it to brute force other people's wallets as you browse the Internet.


---

### Answer by username_1 on 2013-12-31. Score: 1

Ripple.com does not store any information about the users of the ripple network. Instead if you want to make transactions using only a username and password you must store your secret key in an encrypted blob vault, using your username and password credentials to create the encrypted cypher-text.

The web wallet app available at ripple.com/client uses such a blob vault to store and retrieve your ripple secret key. Then behind the scenes it signs transactions to the ripple network using your key. The provider of your vault is configurable and if you desire you may implement your own blob vault by following the vault protocol and by consulting the official open source [blob vault code on github](https://github.com/ripple/ripple-blobvault).

Of course in your own ripple applications you can use whichever protocol you like to store and retrieve your secret key using a username and password for encryption. Remember it is not possible to make transactions in the ripple ledger without a signature from your account secret key.


---

