Is there a way to have Wasabi keep xPub's encrypted?

[tlundgren]

As far as I understand, Wasabi keeps the xpub of a wallet (at least, when it acts as interface for some hardware wallets) stored in plain text (field ExtPubKey in the json files found in the wallets folder).

In Wasabi FAQ we can read about how to avoid leaking the xpub when using a Ledger Nano, specifically, it also says that the Ledger software can keep the xpub encrypted. So, is there a way to keep it encrypted behind a password in Wasabi too?

Thank you.

[yahiheb]

So, is there a way to keep it encrypted behind a password in Wasabi too?

Currently this is not possible.
Take a look at the discussion in this issue zkSNACKs/zIPs#39

[tlundgren]

I see.
Thank you.

[MaxHillebrand]

As @yahiheb says, unfortunately that's not possible in Wasabi at the moment.

however, you can manually encrypt the .walletwasabi folder after you run Wasabi, then you have to manually decrypt it before you can use the wallet again next time.

[molnard]

We talked about this a bit. TL;DR; In general the best practice is to ensure safety on the OS level. Like having a VM or encryption on the file system.