2.4 KiB
| id | revision | language | title |
|---|---|---|---|
| 496 | 0 | en | Transfer your community's ownership |
:octicons-beaker-24: Beta
If you can't manage your Status Community anymore, you can transfer the ownership to someone else. To transfer your community's ownership, you need a backup of the community's private key.
When you transfer the ownership, the new owner's computer becomes a community node with full control of the community, including its settings, permissions and membership approvals.
:::tip If you need help managing your community, consider adding others as admins. For more information, check out Delegate admin functions to community members. :::
Current security issues you should consider
The current system for transferring ownership of Status Communities has two important security issues:
- The community owner has to share the community's private key with the new owner. Manually transferring the private key from one owner to another is an insecure method of handling a private key.
- There is no way to be certain that the community is fully transferred. After handing it over to the new owner, the previous owner may still have a copy of the private key. This means that an old owner with malicious intentions could potentially regain access to the community at any time.
We're working on implementing a token-based ownership model to solve these problems. In the meantime, be extra cautious when handling your community key and keep it safe. For example, don't save your community's private key in an online storage service or screenshot.
:::warn Read and consider the security implications before you transfer the ownership of your community or become the new owner of someone else's community. :::
How to transfer your community ownership
Here's how to transfer your community:
- Back up your community's private key.
- Handle over the private key to the new community owner.
- Ask the new owner to restore the community using the private key.
- Leave the community. If you wish, join the community again as a member.
- Delete or destroy any copy you own of the private key.
*[Beta]: This software feature is currently incomplete or in beta, and is subject to change at any time.