Waymont Recovery Module

What happens if your trusted signing device is lost or stolen? Enter Waymont Recovery Module.

Overview

The Waymont Recovery Module is a Gnosis Safe module that can be enabled on the Waymont Policy Guardian contract.

If enabled, the Waymont Recovery Module can enable you to change your trusted signing device if 51% of your Trusted Guardians have signed & approved your recovery. In addition, recovery requires a 48 hour timelock, during which time you can cancel from your Waymont Web account.

Enrolling Trusted Guardians

Waymont supports social recovery via an intuitive flow.

Invite your friends and family to be your “Trusted Guardians” via email in the Settings page.
Your invited parties will receive an email invitation to download the Waymont Mobile App.
Once the invited Guardians download the Waymont Mobile App, it creates a private key secured via the Secure Enclave of their mobile device. It also asks the invited Guardian to backup an encrypted version of their keys to iCloud.
You will need to confirm and approve their enrollment as a Trusted Guardian via your Waymont Mobile App.

In the event that your Trusted Guardian loses their device, they will be able to restore their recovery signer via their iCloud backup. iCloud backups are encrypted and an attacker would need to gain access to multiple Trusted Guardian accounts to trigger recovery.

Recovering your keys

We’ve introduced account recovery to eliminate single-points of failure. A user may recover the following assets via the following steps:

Download the Waymont Mobile app and scan QR code on Waymont Web to login
Select "I have lost my Trusted Device," which triggers the Recovery process
Ask guardians to open their Waymont Mobile App and approve the recovery request via their biometrics
If 51% of the guardians approve the request, the device that triggered the recovery is designated as the new signer following a 48-hour waiting period.

If you trigger a recovery request via your Trusted Guardians, the Waymont Recovery Module verifies that 51% of your Trusted Guardians have approved of the recovery and the Policy Guardian enforces a 48 hour delay on any recovery.

If an unintended recovery is triggered, you may cancel recovery from within Waymont Web and SSO.