How to Recover Your Account
Step-by-step guide for restoring access to your Vauchi identity.
Self-custody is a marvellous thing right up until the afternoon you're locked out. Vauchi holds nothing on your behalf — there's no "forgot password" email, because there's no one on the other end who could honour it. So recovery isn't a single button; it's whichever of these you prepared for in advance. Pick the highest row in the table you can satisfy.
Choose Your Recovery Method
| Situation | Method | Time Required |
|---|---|---|
| Have backup file + password | Backup Restore | 5 minutes |
| Have another linked device | Device Link | 5 minutes |
| Lost everything | Social Recovery | Hours to days |
Backup Restore
If you have your encrypted backup and its password:
Step 1: Start Fresh
- Install Vauchi on your new device
- On the welcome screen, tap Restore from Backup
Step 2: Enter Backup
- Paste your backup code (the long string of characters)
- Tap Next
Step 3: Enter Password
- Enter your backup password
- Tap Restore
Step 4: Wait for Sync
- Vauchi restores your identity, contacts, your own card, and your labels straight from the backup
- Per-contact forward-secrecy state isn't in the file; it quietly re-establishes itself on the next sync with each contact
- Within minutes, you should see your contacts
The backup is sealed with your password and nothing else. Vauchi stretches that password with Argon2id (deliberately slow, to make guessing expensive) and then encrypts everything with XChaCha20-Poly1305. The flip side of that strength: a forgotten password is unrecoverable, by design. No key escrow means no back door — for you or anyone else.
Device Link
If you have another device still logged in:
Step 1: On Your Working Device
- Open Vauchi
- Go to Settings > Devices
- Tap Link New Device
- A QR code appears
Step 2: On Your New Device
- Install Vauchi
- Tap Join Existing Identity
- Scan the QR code
Step 3: Revoke Lost Device (Optional)
If your old device was lost or stolen:
- On your working device, go to Settings > Devices
- Find the lost device
- Tap Revoke
Social Recovery
If you've lost all devices and don't have a backup:
Overview
Long before passwords, identity was vouched for by people who knew you — and that older system never forgot a face. Social recovery makes it cryptographic. A handful of contacts who once exchanged with your old identity, in person, confirm that you are still you.
Two things to understand before you start:
- The number of vouchers needed is a small, configurable threshold — a few by default, not a magic "exactly 3." Treat "round up a handful" as the plan.
- Social recovery rebuilds your relationships, not your old keys. It mints a new cryptographic identity; the old signing keys stay lost for good. Most things carry over, but some settings — visibility rules in particular — may want re-tuning afterwards.
Step 1: Create New Identity
- Install Vauchi on a new device
- Create a new identity (fresh start)
- This gives you a new device to work from
Step 2: Start Recovery
- Go to Settings > Recovery
- Tap Recover Old Identity
- Enter your old public ID (if you know it)
- If you don't know it, ask a contact — they can find it in your contact details
- A recovery claim is generated
Step 3: Collect Vouchers
For each voucher, you need to meet a contact in person:
- Meet in person (physical presence required)
- Show them your recovery claim
- They open Settings > Recovery > Help Someone Recover
- They paste your claim
- They verify it's really you
- They tap Create Voucher
- They share the voucher with you
Repeat until you reach the threshold (a handful by default).
Step 4: Submit Recovery
- Go to Settings > Recovery
- Import each voucher you received
- Once you've reached the threshold, tap Complete Recovery
- Vauchi submits your recovery proof
Step 5: Wait for Verification
- The relay verifies your vouchers
- Other contacts may verify via mutual connections
- Once verified, your identity transitions
Step 6: Re-Exchange (If Needed)
Some contacts may need to re-verify you:
- They'll see your card update through recovery
- Meet them in person to confirm
- Your relationship continues
Helping Someone Else Recover
If a contact asks you to vouch for their recovery:
Step 1: Verify Their Identity
Before creating a voucher:
- Meet in person if possible
- Confirm they are who they claim to be
- Be suspicious of unusual requests
Only vouch if you're certain. A voucher is you putting your name on "yes, this is really them" — false vouching is how identity theft gets in the door.
Step 2: Create Voucher
- Go to Settings > Recovery
- Tap Help Someone Recover
- Paste their recovery claim
- Tap Create Voucher
Step 3: Share Voucher
- Copy the voucher
- Send it to them (AirDrop, messaging, etc.)
Troubleshooting
Backup Restore: "Invalid Password"
- Check for typos
- Passwords are case-sensitive
- Try any variations you might have used
If you truly can't remember the password, there's no recovering the backup — that's the design, not a bug. Fall back to social recovery.
Backup Restore: "Invalid Backup Code"
- Make sure you copied the entire code
- Check for extra spaces or line breaks
- Try copying again from the original source
Social Recovery: "Not Enough Vouchers"
- You haven't reached the threshold yet (a handful by default)
- Round up more contacts who exchanged with your old identity
- Vouchers must come from different contacts
Social Recovery: "Voucher Rejected"
- The voucher may be for a different identity
- The voucher may have expired (vouchers go stale after about 90 days)
- Ask the contact to create a fresh one
Can't Remember Old Public ID
- Ask any contact who had your old card
- They can find your ID in your contact details
- Look through old screenshots or notes
Prevention Tips
A backup you make today is a favour to a future, locked-out version of yourself. The cheapest recovery is the one you never need.
- Create a backup as soon as you set up
- Store backup securely (password manager, safe)
- Link multiple devices (phone + tablet/desktop)
- Remember your password (use a passphrase — long beats cryptic)
- Stay in touch with a handful of contacts who could vouch for you
Security Notes
- Social recovery requires in-person verification — presence is the proof
- Needing several independent vouchers prevents any single person from impersonating you
- Vouchers expire after about 90 days, so a stolen one doesn't stay useful
- A backup is yours alone: Argon2id + XChaCha20-Poly1305, no escrow, no back door
- The relay only ever forwards encrypted blobs, routed by daily-rotating mailbox tokens — it never sees your identity, your IP, or your data
For more on security, see Backup & Recovery Feature.