Key Generation and Recovery Key Export

Keys are generated automatically at the first login: two keys on the user’s phone and one on our server. After generation, there are three keys: a device key, a server key, and a recovery key.

The device key never leaves the mobile phone, it’s impossible to move or transfer it. This rule ensures that the key exists in a single instance and is not compromised as long as the owner has access to the device.

The key generation procedure is considered complete when the recovery key is exported from the device.

As a result, the loss of either device — a phone with the device key or a recovery key storage device — will not lead to loss of money.