Recovery tool.
This file is the only place your recovery kit is ever opened. Its own policy stops it making network connections: it reads files you give it and saves files you carry back to the website.
One kit, kept for good.
Five steps. At the end you will have four files: a recovery kit to put away, a day key to open your Bunker with, a cancel file to keep within reach, and a public request the website uses to build it.
Which network
Recovery password
Protects the recovery kit, the one file that can replace every key. Typed only into this tool, never into a website. There is no reset.
Use five or more unrelated words. Not a phrase, a date, or anything you use elsewhere. Write it down and keep it with the kit’s backup, not on this device.Day key password
Protects the day key, which you open on the Bunker website to withdraw. It must be different from the recovery password.
Where your Bunker may send, and how fast
Trusted addresses receive withdrawals at once. Everything else waits, and while it waits you can cancel it with this recovery kit. That wait is the only thing that stops someone who steals your day key.
Create the kit, then prove it saved
Your Bunker’s address
- Recovery kit. Move it off this device: a USB stick in a drawer, and a second copy somewhere else. Never upload it anywhere.
- Day key. This is what you open your Bunker with on the website.
- Creation request. Public. Upload it on the website’s Recovery page to build the Bunker, then deposit.
- Cancel file. Your emergency stop. If a withdrawal you did not make is waiting, upload this file on the website’s Recovery page: it cancels the withdrawal and kills this day key, at once, without this kit. Keep it where you can reach it in minutes, somewhere other than beside the day key: your phone, your email to yourself. It holds no secret and cannot move anything. Anyone who has it can only do the same thing: stop your Bunker until you come back here with the kit to make a new day key.
Install new keys.
A recovery packet replaces every key, kills every earlier day key and cancels a withdrawal that is still waiting. It never moves assets. Making the same packet twice gives the same file, so it is safe to repeat. If you already used your cancel file on the website, the keys have been replaced: enter the generation your Bunker shows now and re-issue its day key.