What is social recovery?

A wallet design in which a set of trusted people or devices, chosen in advance, can collectively restore your access if you lose your key.

Recovery requires a threshold of guardians to approve, and most implementations impose a delay before the change takes effect so you can cancel an unauthorized attempt. It removes the all-or-nothing quality of a seed phrase and replaces it with a different assumption, that your guardians stay reachable, stay honest, and do not collude. Smart contract wallets support it natively. See account abstraction and seed phrase.

It exists because the single biggest cause of permanent loss in self-custody is not theft. It is a person losing their own backup, and no amount of cryptography helps with that.

How it works

An ordinary wallet is an address derived from one key. A smart contract wallet is an account whose rules are code, and one of the rules can be a recovery procedure. That is what ERC-4337 enables at the network level: an account can define its own validation logic rather than being tied to a single signature (source: ERC-4337).

A typical configuration names a set of guardians, which can be friends' wallets, your own hardware devices, or an institutional service, and a threshold such as three of five. If you lose your signing key, the guardians each submit an approval. Once the threshold is met, most implementations start a timelock of days before the key rotation takes effect, and during that window the existing key can cancel the whole thing.

That timelock is the security of the design. Without it, a threshold of guardians who colluded or were compromised could take the account instantly. With it, a legitimate holder gets a warning and a veto.

Guardians never hold the funds and cannot spend on your behalf. They can only, together and slowly, change who signs.

Example

Illustrative configuration. Five guardians, threshold of three, timelock of seven days. You lose your phone. Three guardians approve within a day, the seven-day clock starts, and on day eight your new key controls the account. Total time to recovery is eight days and no seed phrase was involved.

Now the adversarial case. An attacker compromises three guardians and starts a recovery. The timelock notifies you, and your existing key cancels it on day two. The attack cost the attacker three compromises and gained nothing. Shorten the timelock to zero and the same attack succeeds instantly. The waiting period is not friction to be optimized away; it is the mechanism.

Why it matters when you buy

This is a self-custody design decision, so it applies after a purchase rather than during one. Getting coins off a venue is where it starts, and withdrawal costs vary widely, as the fee comparison shows. The guide on moving crypto off an exchange covers the mechanics, and the lost seed phrase guide covers the failure this design is meant to prevent.

Related terms

• account abstraction — the capability that enables it
• erc 4337 — the standard most implementations use
• seed phrase — the single point of failure it replaces
• multisig — the older answer to the same problem
• shamir backup — the split-secret alternative
• self custody — the context all of this belongs to

Questions

Can my guardians steal my funds?

Not directly. They cannot spend, only approve a change of signer, and a threshold of them acting together still faces the timelock during which you can cancel. Collusion plus your inattention is the scenario to defend against.

Does this work on any blockchain?

It needs a chain that supports programmable accounts. It is common on Ethereum and networks compatible with it, and unavailable on chains where an account is only a key pair. See smart contract.

Is it cheaper than a hardware wallet?

It is a different trade rather than a cheaper one. Contract account operations cost gas that a plain key does not, and you gain a recovery path a hardware wallet on its own does not have.