security

What Is a Social Recovery Wallet?

Guardians, thresholds and time delays, how social recovery restores access to a wallet without any single party ever being able to move your money.

A social recovery wallet is a self-custodial wallet that can be restored through a group of nominated guardians rather than a single backup phrase. Guardians cannot spend your funds or start a transfer; they can only approve a recovery you initiate, and only a defined quorum acting together can complete it.

How a social recovery wallet works: the three moving parts

Guardians

A guardian is a party you nominate who can approve a recovery request. In practice a guardian can be:

  • A trusted person’s device - a family member or close friend running the same wallet app
  • A second device you own - a tablet, an old phone, a hardware key
  • An identity provider - an account you already use daily and can prove control of
  • A service - a provider offering guardianship as a function

The critical constraint: a guardian has no standing power. They cannot see your balance, cannot spend, cannot initiate anything. Their only capability is to say yes to a recovery you have already started.

The threshold

You set how many guardians are required: 3 of 5, 2 of 3, whatever fits. This is the security dial, and it trades two risks against each other:

  • Too low (1 of 3): easy to recover, but a single compromised guardian is dangerous.
  • Too high (5 of 5): very hard to attack, but one unreachable guardian locks you out permanently which reintroduces exactly the problem you were solving.

For most people, 3 of 5 is a reasonable default: you can lose two guardians entirely and still recover, and an attacker needs three separate compromises.

The time delay

When a recovery reaches its threshold, it does not complete immediately. A waiting period, often 24-72 hours elapses first, during which you are notified through every channel the wallet has.

This exists for one reason: if someone else initiates a recovery on your wallet, the delay is your window to notice and cancel. Without it, a successful social-engineering attack would be instant and final. The inconvenience is the security property.

What social recovery looks like step by step

  1. You lose your phone. Your funds are untouched, they’re on-chain, and nobody has your key. (If you’re in this situation right now, start with how to recover a crypto wallet.)
  2. You install the wallet on a new device and choose “recover”.
  3. The app generates a fresh key pair on the new device and creates a recovery request.
  4. Your guardians are notified. Each verifies it’s really you, ideally out of band, by voice or in person and approves.
  5. Once the threshold is met, the delay begins. You’re notified continuously.
  6. The delay elapses. Control transfers to your new device’s key. The old key is retired.

At no point did anyone hold your funds. At no point could any single guardian have moved them.

What it defends against, and what it doesn’t

Defends well against: losing your device, device failure or theft, forgetting a password, the death-or-incapacity problem (guardians can be part of an estate plan), and the ordinary attrition that destroys paper backups.

Defends poorly against: a compromised current device, social recovery is about regaining access, not about protecting a phone an attacker already controls. It also does nothing about phishing that tricks you into signing a malicious transaction with the key you still have.

Choosing guardians well

  • Spread them across social circles. Three colleagues who share an office are close to one guardian for attack purposes.
  • Prefer reliability over closeness. The person you trust most emotionally may not be the person most likely to still have the same phone number in five years.
  • Mix types. People, your own second device, and a provider fail in uncorrelated ways.
  • Tell them what they’ve agreed to. A guardian who doesn’t know they’re a guardian is not a guardian. Explain that they’ll be asked once, maybe never, and that they should verify by voice.
  • Review it. Guardian sets go stale. An annual check is proportionate.

The honest limitations of social recovery

It requires other people. If you are genuinely isolated, or want a backup that works with no network and no third parties, a seed phrase on metal in a safe is the better tool.

Recovery isn’t instant. By design. If you need access this hour, the delay is a real cost.

Implementation quality varies enormously. “Social recovery” is a category, not a guarantee. Ask whether the provider can complete a recovery alone (it shouldn’t be able to), whether there’s a time delay and how long, whether you can cancel, and whether the design has been audited.

Guardians can be a privacy leak. Someone knows you hold crypto. For most people that’s fine; for some it’s a threat model.

How it fits the bigger picture

Social recovery matters because it decouples two things that were only ever joined by implementation: who holds the key and whether access can be restored.

For a decade, self-custody meant accepting that a single mistake was financially fatal, and most people rationally declined. Social recovery keeps the property that makes self-custody worth having, no provider can move your money, while removing the requirement that you personally safeguard one secret forever.

DYNK starts from the same premise, that a single secret you must keep forever is the wrong default but gets there by a different route. Rather than a guardian quorum, DYNK’s recovery runs through social apps you are already familiar with: you sign in again on a new device and your wallet comes back. With a seed phrase available as an optional export for people who want full portability. Same goal, different mechanism, and different trade-offs from the ones described on this page.

What non-custodial actually means

The one-question test for whether a wallet is genuinely self-custodial, and what you gain and lose.

→

Frequently asked questions

How does social recovery work?

You nominate several guardians and a threshold, such as any three of five. If you lose access, you start a recovery from a new device and your guardians each approve it independently. Once the threshold is reached and a built-in time delay elapses, control of the wallet transfers to your new device.

Who should I choose as guardians?

Choose parties who are unlikely to lose access themselves, unlikely to disappear, and importantly, who do not all know one another. Spreading guardians across separate social circles makes collusion and coordinated social engineering much harder. A second device you own and an identity provider you use daily are both reasonable guardians alongside people.

Why is there a delay before recovery completes?

The delay is a security control. If an attacker starts a recovery on your wallet, the waiting period gives you time to be notified and cancel it before control transfers. Instant recovery would remove your only opportunity to intervene, so the delay is deliberate rather than a technical limitation.

Is a social recovery wallet still non-custodial?

Yes, provided no single party can move your funds alone. Guardians cannot spend, cannot initiate transfers, and cannot act without a quorum and a recovery you began. A provider that acts as one guardian among several has no more power than any other guardian, which is what keeps the wallet non-custodial.