Social recovery is a wallet recovery mechanism where a group of pre-designated trusted parties (guardians) can collectively authorize a new signing key if you lose access to your wallet. No single guardian can access your funds alone, only a threshold (like 3-of-5) acting together can trigger recovery. It eliminates the "lose your seed phrase, lose everything" failure mode.

What Is Social Recovery for a Wallet?

3 min read

The short version

Social recovery is like having a group of trusted neighbors who each hold a piece of your spare house key. No single neighbor can enter your home alone. But if you lose your key, any three of them can come together, combine their pieces, and let you back in. They help you regain access without ever having full access themselves.

How It Works

Implementation (ERC-4337 smart contract wallet): you deploy a wallet contract and register a list of guardian addresses plus a threshold (e.g., 3-of-5). Guardians can be: friends' wallets, family members' hardware wallets, institutional guardians (services), or even time-locked delayed recovery. If you lose your signing key, you submit a recovery request to the contract. Guardians each submit an on-chain approval. When threshold is met, a timelock begins (24-72 hours). After the timelock, the contract accepts a new signing key you specify. The timelock allows you to cancel if the request is malicious. Guardians never gain direct access to funds, they can only approve recovery.

Full social recovery flow

Your wallet has 5 guardians: your brother (MetaMask), your partner (Ledger), a trusted friend (MetaMask), your own hardware wallet (as backup signer), and Argent Guardian Service. Threshold: 3-of-5. Your phone is destroyed with your signing key. You buy a new phone, generate a new key pair, and submit a recovery request: "Replace old signing key with [new key]." You contact your brother and partner, they each approve on-chain. That is 2. You also use your hardware wallet (guardian #4) to approve. That is 3-of-5, threshold met. A 48-hour timelock starts. After 48 hours with no cancellation, your new signing key is active. Total downtime: 2-3 days. Funds were never at risk.

What People Get Wrong

  • Guardians can steal your funds

    Guardians can only approve key rotation, not direct spending. Even if all guardians collude, they change the signing key, the wallet still requires a valid signature from that key to spend. The timelock gives you time to react to unauthorized recovery attempts.

  • This is the same as multisig

    Related but different. Multisig requires multiple signatures for every transaction. Social recovery requires multiple approvals only for key rotation/recovery, day-to-day spending uses your single key normally. It is lighter-weight for regular use.

  • Social recovery works with any wallet

    It requires a smart contract wallet. Traditional EOA wallets (standard MetaMask, standard Ledger) cannot implement social recovery because their spending logic is fixed to one private key. You need a programmable wallet (ERC-4337 account) for this feature.

Sources & Further Reading

Questions People Also Ask

Who should I choose as guardians?
People who: (1) are unlikely to collude against you, (2) are geographically distributed (not all in one location), (3) are reachable in an emergency, and (4) are technically capable of signing an on-chain message. Mix of family, friends, and one institutional guardian is a common pattern.
What if a guardian loses their key?
You can rotate guardians at any time while you have access to your wallet. Best practice: review your guardian list periodically and replace any who have lost keys, changed phones, or become unreachable.
Is social recovery decentralized?
Yes, if guardians are independent individuals. The contract is on-chain, the approval is on-chain, and no company has unilateral control. Some implementations use a mix of human guardians and institutional guardians for resilience.

More in Keys, Wallets & Self-Custody

See all →
Was this page helpful?

Page last checked