Sign in with X
bWalletX can make a wallet from your X account. You get your X username as a verified paymail, b0asex.x@bwalletx.com for example, with your picture, a token and a room.
What it does
On Create account there is a Continue with X button. You sign in on X's own page, come back to the wallet, and your @handle and picture are already filled in. You still choose a password and save a 12-word recovery phrase. Then you claim the name.
The name is your X username in lower case with .x on the end. @b0aseX becomes b0asex.x@bwalletx.com. Underscores become hyphens, because paymail names can't have them.
Wallets made before this can do the same from Settings › Identity › Connect X or Google. The verified name becomes the main name, and the old one still receives.
How the proof works
We run the sign-in ourselves, on the same server as the paymail. Before the wallet opens X, it makes a random secret and sends us only its hash. When X sends you back, we seal your X account into a ticket tied to that hash. The ticket is no use without the secret, and the secret never leaves your device.
To register a .x name, the wallet has to show both. So only the person who signed in as @b0aseX can claim b0asex.x, and one X account means one wallet.
From X we read your username, display name and picture. We don't ask to post and we don't read messages. X has nothing to do with your keys.
What went wrong first
On iPhone we first opened x.com in the browser. The X app grabbed the link, its own browser broke X's "Sign in with Google" page, and its "Open bWalletX" button did nothing. It now uses an in-app Safari sign-in sheet that returns straight to the wallet.
On the web wallet, sign-in opened a new tab and ended on a "you're signed in" page with no way back. It now signs in in the same tab and returns to web.bwalletx.com.
Restoring with 12 words and Continue with X could have put a verified name on the wrong wallet. Now the wallet checks the phrase against the name first, on the device, and stops if they don't match.
Where it is
In bWalletX: the Android APK, the Chrome extension, the web app and iPhone. Not in bWallet, the App Store and Google Play edition, until app review is settled. Not for agent accounts either; an agent posting as someone's X account needs its own design.
How-to page: bwalletx.com/x.
— Richard