First, user profile systems create an attack surface for impersonation because anyone can present an identity – their own or otherwise – making it possible to fake a user profile and impersonate someone else. In other words, each device has access to all shared secrets that represent the user’s contact list (i.e., their relationships with other users). In 2019, user researchers found that users have trouble securing their own identity wallet , which is consistent with prior research that key management is not sufficiently usable to provide effective security for most users .