A critical design review of Xapo
To achieve widespread adoption, bitcoin products must translate the unfamiliar realities of the mathematical currency into concepts and usability models that are easily understood by consumers and organizations. This article examines, from a product design perspective, a leading bitcoin product, Xapo.
The challenge
Compared to commodities like gold and fiat currencies like Dollars, Bitcoin represents an entirely new conceptual paradigm. There’s nothing physical about bitcoin. The “owning” of a bitcoin means the control of one or more complex numbers known as a private keys. The public side of a private key provides accessibility as an “address”. A person might choose to associate all their bitcoins with a single address, or they might choose to create a new one for every transaction they make. To provide a sense of familiarity, private keys can be managed in a bitcoin “wallet”. Different types of wallets are sometimes characterized as “online and hot”, or “offline and cold”.
For products offering the storage, security, and access to one’s bitcoins, translating such foreign notions into concepts that are approachable and understandable by consumers and organizations represents a considerable design challenge—and one that is of critical importance if we’re to achieve widespread adoption of this promising technology.
A personal interest in Xapo
While evaluating bitcoin storage options, I created an account at Xapo, but soon afterwards switched to another product. I didn’t give much thought to why I switched; something just didn’t feel quite “right” about the Xapo product.
Then I happened to read the book, “Digital Gold”, by Nathaniel Popper. In his telling of the history of bitcoin, we’re introduced to Wences Casares, an Argentinean entrepreneur and the founder of Xapo. I so related to the life experiences, frugal disposition and passions of Wences, that I finished the book thinking that if I could choose to work with anyone in the bitcoin industry, it would be with him.
And that led me to think deeper about why his product Xapo didn’t stick with me, and what I’d do to fix it.
In the rest of this article, I’ll retrace my onboarding experience with Xapo, highlighting the frictions and confusions I felt along the way, and I’ll conclude with thoughts on the approach I’d take to addressing those problems.
The reader will notice that the article grows harsh in tone, and my fear is that it might come across as offensive. But just before editing all that out, I realized that the growing harshness is a direct reflection of the growing frustration I felt trying to get to know the product. And since that ultimately led me to leave Xapo, I decided it was an important ingredient to keep in the article.
So you’ve landed at Xapo
When you first land at Xapo, you’re greeted with the following message:
My very first thought was that the word “most” must be missing, i.e. that this message was supposed to have read, “The world’s most secure bitcoin wallet”. That’s a minor detail, but important in the sense that my very first cognitive experience with the product is a tiny bit of confusion.
Moving on, this first screen immediately refers to “cold storage” and “multi-signature” technologies. These are concepts that are unlikely to be commonly understood, and as such represents the first potential point of friction in terms of converting a new customer. If I were a new bitcoin user, still grappling with the concept of a “bitcoin wallet”, I think I’d feel unsure whether this product is or isn’t relevant to me.
Still feeling unsure about this product, I’m probably more likely to click “Start tour”, than to directly create an account.
Starting the tour, I’m dropped straight into the the topic of “offline encrypted servers”, that are “never connected to the internet”. Remember, this is the second screen I see as a potential new Xapo customer, and possibly even a new bitcoin user. I still don’t really know what the product is, but I’m launched into a presentation of how its security is implemented.
In that context, some questions a new bitcoin user might have:
- If my bitcoins are offline, does that mean I can’t use them?
- Why are the servers “never connected to the internet”?
(I know the answers to these questions, but I don’t expect the non-technical bitcoin user would.)
Clicking next…
I’m on screen number three, and I’m looking at “Wave-blocking Faraday cages”. I’m afraid a lot of people might return to their Google search at this point.
But for those who continue…
Screen number four talks about storing my bitcoins in Switzerland. A new bitcoin user might wonder if that’s even legal, vaguely recalling stories about Americans getting in trouble for having money there. And is the length of the access column really relevant to my decision to use this product?
We continue, just to finish the tour…
Now we’re on a page that gives the visual impression that we’re floating in space—complete with moving stars in the background—and boasting that Xapo has raised $40 million. This is the last screen in the product tour, and it’s the screen least related to the product.
At this point, I’ve finished the tour, but I feel I know even less about the product than I did at the beginning. I certainly am left with the impression that Xapo take security seriously, but I still don’t know exactly what Xapo is or whether it’s relevant to me.
The tour didn’t work. Let’s try navigating around.
Let’s look at the Xapo navigation options. We find six items that are treated equally from a visual design point of view:
- An “about” area, where I hope I can learn more about what this product actually is.
- Two “product” areas, for the wallet and the vault.
- One “contextual” area, Institutions. I’m an individual, so I guess I should skip that one.
- A functional area, “login”. I’ll also skip that for the moment.
- And a hamburger menu, which, although it can have its place, is known to be the junk drawer of navigation controls, as you have no idea what to expect there.
So here’s the About page:
Reading this, I’m now thinking that the product is somehow a combination of a bitcoin wallet and a vault, perhaps not exposed to the risks I’ve read about with other online wallets. That sounds pretty good, and I find myself wanting to learn more about how that works.
But to learn more, it looks like I’ll need to tap the pulsating “down arrow”, because the designers felt that before understanding more about the product, I’m more likely to want to read—again—about the company’s investors.
So I click the down arrow, expecting to be taken somewhere where I can learn more about the product, but instead, all that happens is that I jump straight to that same message about the investors.
Let’s just create an account
If I can’t understand the product from the marketing site, maybe it’ll all make sense once I create an account. After doing that and logging in, I see three equal navigation items—xapo, wallet and vault. (And I find myself wondering why they’re all displayed in lower case, since at least Xapo has until now been consistently capitalized.)
So I click to access the “wallet”.
In the WALLET (now all capitalized), and I see a credit-card shaped block with a gear and a large “X” in the middle. I have no idea how to interpret the meaning of the big “X”? Is there something missing? Did I do something wrong?
Conceptually, “My Address” is information, while “Transfer” and “Send” are actions, and so they shouldn’t be treated identically in the visual UI. Here I find myself wondering what the difference is between “transferring” and “sending”.
Let’s try clicking on the gear icon:
This feels a bit overwhelming, and now I’m even more confused:
- I still don’t know why I’m looking at an “X”. Should I email support about that?
- Apparently this is the wallet I’ll use to send “micropayments” through “Twitter and third-party apps”. What if I want to send payments that are not “micro”? And what’s a “third party app”?
- There’s no contextual help information around the concepts of “Who can access this wallet?” What does it even mean to “invite someone to my wallet”? Why should anyone other than me have access?
At this point I’m thinking, “OK, I was just looking for a place to store my bitcoins, but this thing looks waaaaaay too complicated for my needs.”
Let’s try the “vault”:
Instead of a black card used in the wallet, the vault is represented by a green card with a “V”. What does “V” mean—“Vault”? But if that were the case, shouldn’t the wallet have displayed a “W” instead of an “X”. And what are those three vertical white bars supposed to mean?
Say I want to transfer bitcoins into or out of the vault. Here’s what that looks like:
This UI gives the impression I’m transfering from my black “X” (different typeface now) to my green “V” (with three vertical lines). And it looks like the black wallet’s balance is in bitcoin (BTC), while the vault’s balance is in US Dollars (USD)?
And for some reason, whereas everywhere else in the site the submit buttons span the width of the window, here it’s shorter.
I believe it was around now, when I decided to just switch to another product. All of these conceptual and UI friction points caused me to feel insecure in using the product, and I also had a lingering suspicion that the product wasn’t really even intended for me.
Miscellaneous issues
I observered a number of other, minor design and copy quibbles at the website, none of which were show-stoppers, but all of which compound in terms of experience and impression.
I think the website needs some tightening and editing of the copy. For example, when you say, “Secure bitcoin storage is what we do best,” the first thing that comes to my mind is, “Everything else we do, we do worse.” Something like, “We’re the industry leader in secure bitcoin storage” might be better.
Here’s a layout issue, in which you can’t read the white text against the white background.
And here’s some poor attention to detail. Margin spacing is off. Font size doesn’t make sense with respect to the rest of the site.
Redesigning the product
The design of a product like Xapo has to both bridge the conceptual gap between people’s existing mental models of currency storage, security and use, and the realities associated with a complex system like bitcoin. And it has to do that within the context of a product that’s engaging, confidence-inspiring and easy to use.
But to design Xapo, specifically, would require an understanding of the business priorities of the company, which we don’t currently have. For example, we don’t know the relative importance of providing services to individuals vs institutions. (Xapo was recently announced to be the custodian for a new Bitcoin ETF traded on the stock market.)
So while a Xapo redesign is beyond the scope of this article, we can at least identify some likely objectives.
-
Let’s communciate what the product is, why you need it, and why you should choose Xapo long before getting into the implementation details of encrypted servers and 100 meter bunkers. Xapo are the best at security, but security is not the product.
-
A considerable conceptual challenge is helping the user understand why they would need both hot and cold wallets. Savings vs checking accounts comes to mind as an analogy, but falls short. (Perhaps we could even discover a way to present the wallet and vault as integral components of a single product, instead of two separate things?)
-
Let’s ensure that the process of signing up, creating a wallet, getting bitcoins into the wallet, and then understanding that we might want some of those bitcoins put into cold storage, is friction-free in concept and workflow.
-
Let’s introduce the secondary concepts around the product—multi-signatures, buying bitcoins, etc.—only after we’re sure users understand the core product.
-
Let’s divert the heavy stuff to the institutions—e.g. our $40 million dollar funding, our A-level advisors, our bunkers in Switzerland. It’s those who will have the time and interest in all that before making a decision.
-
Let’s make sure individuals know that using Xapo is free.
-
Let’s make the user experience engaging and reassuring. (The dark theme of the current product feels somehow omninous.)
Finally, let’s keep in mind that as early adopters, we’re participating in a historic process of transitioning people into an exciting but unfamiliar new world. Ultimately, after using the product, we want the user to feel better about entering the bitcoin economy than before they joined.
It’s a big challenge, indeed, but an exciting and worthwhile one to take on, since as product designers we have a huge opportunity and role to play in helping bitcoin succeed!