Your Two Credentials at a Glance
| Passkey | Recovery Phrase | |
|---|---|---|
| What it is | A device-bound cryptographic key using the WebAuthn standard | A 24-word BIP-39 seed phrase tied to an Ed25519 key pair |
| Where it lives | Inside your device’s secure hardware enclave; bound to a specific device | Written down by you and stored offline; generated client-side |
| How you use it | Biometric (Face ID / fingerprint) or device PIN to authorize wallet actions | Used together with your Party Hint to restore wallet access when your passkey is unavailable |
| Can it be extracted? | No — browser-side signing keys are non-extractable within the active browser context | No — generated and imported entirely client-side; never transmitted to Walley’s servers |
| What it protects | Day-to-day wallet access and transaction signing | Ultimate backup; the only recovery path if your passkey device is lost |
| If lost | Use your recovery phrase to regain access | Cannot be regenerated — if lost along with your passkey, access is permanently lost |
Your Passkey
A passkey is a WebAuthn credential stored in your device’s secure hardware. When you authenticate to Walley, your device uses your biometric or device PIN to unlock the passkey and sign the authentication challenge — your biometric or PIN never leaves your device.How passkeys work
- Device-bound: Your passkey is tied to the specific device on which it was created. It cannot be extracted, copied, or transferred.
- Non-extractable: The private key material within the passkey is held inside the device’s secure enclave and cannot be read by the browser, Walley’s servers, or any other application.
- Biometric or PIN authorization: Approving wallet actions requires your biometric or device PIN — adding a physical layer of protection even if someone else has access to your device.
What to do if you lose your passkey device
Locate your recovery phrase
Retrieve the physical copy of your 24-word recovery phrase from wherever you stored it safely.
Select 'Restore Wallet'
Choose the recovery option on the new device. Enter your 24-word recovery phrase and your Party Hint when prompted — both are required to complete recovery. This creates a temporary session on the new device.
Recovery via your phrase establishes a temporary session only — the recovery phrase will be required again for each subsequent session until a new passkey is registered. Register a new passkey promptly after restoring access to return to full security.
Your Recovery Phrase
Your recovery phrase is a 24-word BIP-39 mnemonic that encodes the Ed25519 key pair underlying your wallet. It is generated entirely within your browser — it is never sent to Walley’s servers or stored anywhere outside your control.How the recovery phrase works
- Client-side only: Generation and import happen exclusively in your browser. Walley never transmits or stores your phrase.
- The ultimate backup: It is the only credential that can restore access to your wallet when your passkey is unavailable.
- Requires your Party Hint: Recovery requires both your 24-word phrase and your Party Hint — a short identifier tied to your on-ledger party. You will need both at the time of recovery, so store them together.
- Creates a temporary session: Using your recovery phrase grants access for the current session only. You must register a new passkey or re-enter the phrase for each subsequent session.
- Full wallet access: Anyone who holds your recovery phrase has complete access to your wallet and funds. Protect it accordingly.
How to store your recovery phrase safely
Write it down immediately
When your phrase is generated, write all 24 words on paper — in the exact order shown — before closing the screen.
Record your Party Hint alongside the phrase
Note your Party Hint on the same paper as your recovery phrase. Both are required to restore access — keeping them together ensures you have everything you need in an emergency.
Store it offline
Keep the written phrase and Party Hint entirely offline. Do not photograph them, type them into any app, or store them in any digital format.
Secure the physical copy
Place your phrase and Party Hint in a fireproof safe, safety deposit box, or another secure location only you can access.
Credential Loss Scenarios
I lost my passkey device but still have my recovery phrase
I lost my passkey device but still have my recovery phrase
You can restore access. Navigate to the Walley app on a new device, select Restore Wallet, and enter your 24-word recovery phrase together with your Party Hint when prompted. After restoring, register a new passkey on the replacement device immediately.
I lost my recovery phrase but still have my passkey
I lost my recovery phrase but still have my passkey
You can continue to access your wallet normally using your passkey. However, you have lost your only recovery option. If you subsequently lose your passkey device, access will be permanently lost. Generate and securely store a new backup as soon as possible — consult the Walley interface for guidance on backing up your phrase.
I lost both my passkey and my recovery phrase
I lost both my passkey and my recovery phrase
Access to your wallet is permanently lost. Walley is non-custodial and holds no copies of your credentials. There is no recovery path, no support escalation, and no technical mechanism that can restore access. This outcome is irreversible.
I think someone else has my recovery phrase
I think someone else has my recovery phrase
Treat this as an active security emergency. If possible, immediately move your assets to a new wallet whose credentials only you control. Do not delay — anyone with your phrase has full access to your funds right now.
Summary
- Passkey = your everyday credential, device-bound and non-extractable.
- Recovery phrase = your backup, offline-only and never shared.
- Both lost = permanent, irrecoverable loss of wallet access.