# Key Shards & Recovery

The exit door is open-source — MPC wallet recovery your auditors can read on GitHub.

Every vendor has a recovery story. Almost none of them let you read it. Vaultody's recovery path
is a public, MIT-licensed desktop tool that runs offline: it takes your backup and your RSA
private key and reconstructs your keys with the company entirely out of the loop. Your security
team can review it before you onboard.

## Back up once, verifiably

- **Wrapped to a key only you hold** — each party's share is encrypted to an RSA public key you
  generate on your own machine. Vaultody stores the public half and never sees the private one.
- **Both curve families in every backup** — one encrypted file per curve, ECDSA and EdDSA, so
  recovery restores everything rather than just the popular chains.
- **No escrow** — your RSA private key is the only recovery secret. Store it cold; there is no
  recovery-as-a-service dependency and no third party holding a copy.

## Reshare: recovery without drama

A reshare ceremony rotates all shares while preserving the public key, and therefore every
address. It covers the lost phone, the departing colleague and the threshold change, with zero
on-chain footprint. Parties can be added or removed and thresholds adjusted up to 3-of-5, and the
ceremony is itself approval-gated.

## FAQ

**Who can recover our keys?**
You can. With your backups and your RSA key, the open-source tool derives your keys with Vaultody
entirely out of the loop — that is the design goal, not a fallback.

**Can our security team audit the tool first?**
Yes. It is MIT-licensed and runs offline on an air-gapped machine, so reading the code is the
diligence step rather than a call with our engineers.

## Related

- [Key Management](/features/key-management)
- [Mobile Co-signer](/features/mobile-co-signer)
- [Vaultody MPC](/multi-party-computation)
- [Integrations: Backup & Recovery](/integrations/backup-recovery)