Account Recovery

[Jack-Edwards]

Account Recovery

Users with a verified email address have the ability to perform an account recovery. This process allows the user to set a new password and potentially recovery their encrypted data.

Here are the steps to perform an account recovery:

1. Navigate to the login page and click "Forgot password?"
2. Submit your email address.
3. Click the link in the recovery email.
4. Enter a new password on the recovery page.
5. Enter your recovery key, if you have it, This will allow Crypter to recover any encrypted information you have saved in the Crypter cloud, including private keys and encrypted transfers. If you don't have your recovery key then any encrypted information stored in the Crypter cloud will be lost.
6. Submit the recovery form.
7. Login with your new password.

Recovery Keys

Recovery keys contain two pieces of information:

1. A user's un-encrypted master key. This master key is used to locally encrypt and decrypt all other user keys.
2. A random, secret "proof". A copy of this proof is stored in the Crypter cloud. By providing this "proof" to the Crypter API when performing an account recovery, the API can trust the client has the user's correct master key.

If a valid recovery key is provided during account recovery, the Crypter client can re-encrypt the user's master key using their new password and submit the re-encrypted master key and the existing "proof" to the API. The "proof" in the recovery request must match the "proof" stored in the Crypter cloud for the recovery request to be accepted.

Note, recovery keys may not be re-used. A new "proof" is generated each time an encrypted master key is uploaded or replaced.