How to Regenerate a Vault Backup File

Step-by-step guide to creating, securing, and verifying your vault backup file.

The Backup Flow is essential for safeguarding your part of the vault’s private key (your secret share) in a secure file. This ensures that you can recover access to your vault in case of device changes, loss, or other unforeseen events. Follow this guide to create, secure, and optionally verify your backup file.

Why Is the Backup Important?

The backup file contains your secret share, which is a crucial part of the vault’s private key. Losing access to this file or its password means you may lose access to your vault entirely, depending on the number of Signers (users with key shares) on your vault. This is why it is critical to create, secure, and store your backup properly.

Step 1: Assign a Name to Your Backup

  1. Provide a Backup Name - Keep the default backup file name or enter a custom one. This helps you identify the file in the future.
  2. Tap “Save” to continue.

Step 2: Set a Secure Backup Password

  1. Create a Strong Password - To encrypt your backup file, set a password that is both strong and unique. Use a mix of uppercase letters, lowercase letters, numbers, and special characters.
  2. Confirm the Password

Important: Your backup file cannot be decrypted without this password. Store your password in a secure location.

Step 3: Save Your Backup File

  1. Choose Where to Save - Select a location to save your backup file securely:

    • Ensure that the storage solution you choose is secure and only accessible by you.
    • Don’t store the backup file on the same device that you use the Tholos app with, as this would prevent recovery if the device is lost or damaged.
    • Always maintain backups in a way that prevents accidental deletion, loss, or damage from natural disasters by storing copies in geographically diverse locations.

  2. Separate Backup and Password Storage - Always store your backup file and password in different secure locations to minimize risks.

Step 4: Verify Your Backup File (Optional)

Verification ensures that your backup file and password work correctly and that your secret share is recoverable.

  1. Initiate Verification - Tap on “Verify Backup”. Locate and upload your saved backup file.
  2. Enter the Backup Password - Input the password you set earlier to decrypt and verify the backup file.
  3. Verification Confirmation - Upon successful verification, you’ll see a message confirming your backup is functional and ready for recovery if needed.

Best Practices for Backup Security

  • Regularly update your backup after major vault changes.
  • Periodically verify your backup file to ensure its integrity and accessibility.

By following this guide, you protect your part of the vault’s private key, ensuring that your secrets remain safe and recoverable.