Skip to content

Feature: credential recovery via social/guardian backup of the encryption key #431

Description

@Psalmuel01

Local-only encrypted credentials are lost if the browser storage is wiped and no backup exists. Offer a recovery option beyond a single passphrase.

Scope

  • Let a holder split their credential-encryption key using Shamir secret sharing among chosen guardians (or devices), so a threshold can restore it.
  • Provide export of shares and a guided recovery flow.
  • Keep everything client-side; guardians never see credential data, only key shares.

Value

Meaningful recovery for a self-custodied credential model, reducing catastrophic loss.

Acceptance

  • A holder can split and later recover their encryption key via a threshold of guardian shares, fully client-side.

Metadata

Metadata

Assignees

Labels

Stellar WaveIssues in the Stellar wave programfrontendNext.js UI workhardHigh complexity or deep domain knowledgesecuritySecurity hardening, threat model, key handling

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions