Social Recovery

Social recovery is an access-restoration model in which a user designates a set of trusted parties, called guardians, who can collectively help regain control of a wallet if the primary signing key is lost. Day-to-day spending uses the single primary key; the guardians are dormant until a recovery is triggered. No individual guardian can move funds, and recovery typically requires a majority and includes a built-in time delay to thwart coercion or rushed attacks.

How it works

Most implementations are smart-contract wallets on programmable chains, where the contract enforces the rules: a threshold of guardian approvals authorizes rotation to a new signing key, restoring access without ever exposing the old key or the funds. Users commonly pick three to seven guardians from diverse circles — family, friends, trusted institutions, or even their own separate hardware wallets — so that no single relationship or location is a point of failure. A security delay, often measured in days, gives the legitimate owner time to notice and cancel a malicious recovery attempt before it completes.

Relevance to Bitcoin self-custody

Native social recovery depends on smart-contract functionality that Bitcoin's base layer does not provide, so the term is most associated with account-abstraction wallets on other chains. Bitcoiners achieve comparable resilience through different primitives: a guardian-style threshold can be approximated with multisignature cosigners, where several keys held by different people or devices must agree to spend, or with Shamir's Secret Sharing that splits a single seed into shares held by trusted people. The shared principle is the same — eliminate the single point of failure inherent in one lonely seed phrase.

Multisig and Shamir compared

The two Bitcoin-native approaches solve the problem differently and it is worth knowing the distinction. A multisignature wallet keeps the keys separate at all times; a spend simply requires enough of them to sign, so no single key ever needs to be reassembled and a lost cosigner can be replaced. Shamir's Secret Sharing instead splits one seed into shares that must be brought back together to reconstruct it, which momentarily recreates a single secret during recovery. Multisig is generally the more robust choice for ongoing custody, while Shamir suits backing up a seed you rarely touch.

Honest trade-offs

Social recovery trades one risk for another, and it is worth being clear-eyed about it. You reduce the chance of losing everything to a lost key, but you introduce your guardians as a new attack surface: they can be coerced, can collude, or can simply lose their own shares. The human dimension matters as much as the cryptography. Guardian selection, clear written instructions, and rehearsed procedures decide whether recovery actually works when it is needed — an untested recovery plan is a guess, not a backup. For most self-custodial Bitcoiners the pragmatic version is a well-documented multisig or Shamir scheme they have actually practised restoring.

The deeper lesson of social recovery is that self-custody has always had a human layer, and pretending otherwise is how people lose coins. A lone seed phrase is not really a purely technical artifact; it depends on a person to store it, remember it, and keep it from prying eyes, which are all human tasks that can fail. Distributing trust across guardians or shares simply makes that human layer explicit and gives it structure, so that no single memory, drawer, or moment of coercion can end everything at once. The trade is that you now have to choose trustworthy people, communicate clearly with them, and test the process while you are calm rather than during an emergency. Sovereignty is not the absence of dependence on others; it is deciding deliberately whom you depend on and on what terms, which is exactly what a well-designed recovery scheme forces you to do.

Whichever mechanism you choose, it builds on the same seed phrase and hardware wallet foundations that every self-custody setup rests on.