How does it work?
Offline recovery creates two additional encrypted key shares (a 2-of-2 pair), separate from the wallet’s primary key shares:- Share 1. Encrypted and stored in the user’s Google Drive.
- Share 2. Encrypted and delivered to your configured webhook when you run an offline recovery reshare.
Configure offline recovery
To enable the feature follow the following steps:- Configure Google Drive for your environment.
- In the developer dashboard, go to Wallets > Embedded Wallets > Backup & Recovery.
- Turn on Developer Recovery Share.
- Configure the Share Delivery webhook URL and the RSA public key used to encrypt shares.
If delegated access is enabled, offline recovery uses the same share-delivery webhook URL and encryption key.
Request a recovery share
Run an offline recovery reshare from the SDK for the user:mfaToken:
wallet.offlineRecovery.created event containing the encrypted Share 2. Store Share 2 securely.
Recovery
To recover, the user needs both recovery shares:- Share 2 from your webhook.
- Share 1 from their Google Drive.
offlineExportKey with the two decrypted shares: