Recover access with a threshold of trusted guardians — no seed phrase, no custodian.
Connect a wallet to see yours
Guardians, the threshold and any recovery in flight are on-chain state belonging to one account. Without a connected wallet there is no account to read, so nothing below is anyone's configuration — it is how the mechanism works.
Thresholdyou chooseHow many guardians must approve — at least 2 is recommended
Time-lock48 hoursFixed in the RecoveryGuard contract — cancel any time inside it
Scheme2-of-3Shamir shares, held off-chain — device, your file, your guardian
🗝️
Two files, two holdersYour key is split in three. This device keeps two shares; your backup file holds one and your guardian holds the third. Any two rebuild it.
👥
Guardians for a smart accountIf you have upgraded to a smart account, guardians can also vote to install a new signing key — no files involved.
⏳
A time-lock you can cancelThat vote waits 48 hours before it can complete, and you can cancel it for the whole window.
🔐
Nothing is uploadedA guardian publishes only the hash of their share as their approval. The share itself never reaches a chain or a server.
Two ways back in
Your backup file + your guardian fileRebuilds your original key from the two encrypted files that left your device — the backup file you keep and the one your guardian holds. Same address, full control, whether or not your account is upgraded.Limit: You need both, each under its own passphrase. Either file on its own rebuilds nothing, and neither ever touches our servers. Export them from the NexVault extension under Settings → Backup & guardian files.
On-chain guardian recoveryYour guardians vote to install a new signing key on your smart account after a 48-hour delay you can cancel.Limit: Only for accounts upgraded to a smart account, and the recovered account stays delegate-locked afterwards — move funds to a fresh account when you can.
If your key was stolen rather than lost, guardian recovery cannot help: whoever holds the key can cancel a recovery and can still sign directly. Move your assets to a new account immediately.
Where recovery is set up
Both halves are done in the NexVault extension or mobile app, because both need the key: the backup and guardian files are written from your own shares, and a guardian vote is signed by the wallet that holds them. This site never holds a key, so it can show you what is set up but cannot change it.