Vault Backup and Recovery
This guide would describe the steps to set up Vaults backup and do recovery
Last updated
This guide would describe the steps to set up Vaults backup and do recovery
Last updated
Backup and recovery in PrimeVault require 3 organization admins, with any 2 admins able to recover the vaults together.
To enable recovery in your workspace, first contact PrimeVault support and provide the email addresses of the three admins responsible for managing recovery. PrimeVault will then activate the recovery feature for your workspace. Once enabled, follow the steps below to complete the setup
Each admin must create a secure password in their mobile app, download the encrypted backup file (zip) from the webapp, and store it safely.
For recovery, 2 admins must provide both their passwords and encrypted backup files.
If you're eligible for the backup and recovery process and haven't set up a recovery password yet, you'll see an option to do so on the homepage.
Complete the password setup and keep it secure, as you'll need it for the recovery process.
After setting up the recovery password, the system will generate an encrypted backup file for you to download and store securely.
This file will be required for recovery, so make sure to store it securely..
In the Webapp, Settings -> Vault Backup, where you'll find the option to download the encrypted backup file.
This encrypted backup file is unique to each admin involved in the backup and recovery process and must be downloaded and stored securely.
You can download the encrypted file as many times as needed.
When a new vault is added, the system automatically generates a new backup file, which you'll need to re-download and store securely.
Install the offline tool provided by PrimeVault on any machine.
Any 2 out of the 3 users must upload their encrypted backup file and enter their recovery password.
The local recovery tool will compute and return the private key in hex format for each vault across all supported chains.
For ECDSA-Based Blockchains (Ethereum, Polygon, Arbitrum, Optimism, etc.):
The recovery process provides you directly with a private key.
This key can be imported straight into MetaMask or other compatible wallets.
Once imported, you can easily create transactions within MetaMask to move your funds to the desired wallet.
For EdDSA-Based Blockchains (Solana, Near, Aptos, Radix, ICP, etc.):
The recovery process does not yield a conventional private key
Instead, PrimeVault provides a signing script to authorize transactions. You can use this script to sign any message, and by creating your own scripts based on it, you can move funds on these specific blockchains
Contact PrimeVault for blockchain-specific scripts or assistance.
Recovery is performed using a local offline tool provided by PrimeVault, . The readme in the GitHub has instructions to install the tool locally using the command line.