Recovery kit

The recovery kit is your second key. If you forget the master password, it lets you reopen the vault and choose a new one.

What it contains

A random 32-byte key, displayed in Crockford base32: thirteen groups of four characters, with no ambiguous letters (no I, L, O, U). Example of the format:

7K3M-9PQR-2XTD-...

Two subkeys are derived from it on the device: one seals a copy of the vault key, the other proves to the server, in Cloud mode, that you really hold the kit.

When it is shown

Once only, when the vault is created. The screen only closes after explicit confirmation. It is never shown again, never sent by e-mail, never stored in plain text.

How to keep it

• Print the page offered by the application and store it in a safe place, offline.
• Or copy the thirteen groups by hand on paper.
• Avoid photographing it with a phone that syncs to a photo cloud.
• Do not store it in the vault it is meant to open.

For a crypto wallet, the kit protects access to the vault, not the wallet's recovery phrase itself: that remains an item like any other.

Using it

On the unlock screen, choose Forgot password, enter the thirteen groups, then set a new master password. The vault key is re-sealed with the new password. Items do not change.

Regenerating it

Settings, Security, New recovery kit. The old one becomes unusable immediately. Do this if you think the kit may have been seen.

A question not answered here? support@rempar.org