Make a backup of identities, accounts, and addresses#

Note

This information is not relevant for Concordium Wallet for Android or Concordium Wallet for Web which use a secret recovery phrase to recover a wallet. For more information, see Recover your wallet.

To make sure that you have a backup of your accounts, identities, and addresses, Concordium strongly recommends that you export the data to a file you can store in a safe location. The backup will ensure that you can recover your accounts, identities, and addresses if your Wallet database becomes damaged or if, for some reason, you can’t access the Wallet.

Warning

You are solely responsible for keeping your assets secure. You must never share your private keys, PIN codes, passwords, recovery phrases, LEDGER devices, or mobile devices with anyone.

A backup is only necessary when creating new accounts, not every time a transaction is executed. Think of your account like a safe: it contains assets. If you lose the key, you cannot get into the safe unless you have a copy of the key. Your backup is your copy of the safe key.

You can make a backup from Concordium Legacy Wallet or from Desktop Wallet but there are differences between them.

How to proceed#

Upgrade#

Concordium is continuously improving the security and reliability of its products, so it is vital to ensure that your Concordium Legacy Wallet or Desktop Wallet is upgraded to the latest version available. To check which version of your Concordium Wallet is currently available, refer to the appropriate release notes:

Final Notes#

If the wallet does not have the keys for some accounts and you have previously made a wallet backup using the export functionality, uninstall and reinstall the Concordium Legacy Wallet or Desktop Wallet. You can then import your wallet backup into the new wallet.

If the wallet does not have the keys from some accounts and you do not have a backup of the keys on an exported file, these accounts cannot be used. Therefore, you should ensure that you never ask anyone to transfer CCD to such accounts. Instead, go through a new identification process and generate new accounts that can be used in the future. And remember to export a new backup of the account keys each time you have generated a new account in the app.

Keep previous backup files until you have verified that your latest backup is working properly.

Warning

You can’t import a file created in the Concordium Legacy Wallet into the Desktop Wallet or the other way around because the two wallets handle private keys in different ways. You also cannot import a backup from the Concordium Legacy Wallet to the Concordium Wallet for Android. If you try to import a file that has been exported from the Concordium Legacy Wallet into the Desktop Wallet, the import will fail, and likewise, if you try to import a file exported from the Desktop Wallet into the Concordium Legacy Wallet. For more information, see Deciding between the Wallets.

Desktop Wallet

Because the Desktop Wallet uses a LEDGER device to sign all transactions, you can more easily recover your wallet and accounts if anything happens to your Desktop Wallet or you cannot access it. To access your Desktop Wallet, you use the backup file that you create in combination with your LEDGER device.

If you lose the backup file with your accounts, you can use the Desktop Wallet in combination with your LEDGER device to recover those accounts. You only have to perform a recovery if you have lost the backup of your accounts and identities. If you still have the backup file, you can import the accounts back into the Desktop Wallet.

If you’ve lost your LEDGER device or the device has stopped working, you can restore the keys in another LEDGER device by restoring it from the recovery phrase used for the original device. As long as you have your recovery phrase available, you can recover your wallet and accounts.

To actually access the recovered accounts, you still need the LEDGER device that was used to set up the accounts, or a new LEDGER device that’s been restored from the same recovery phrase.

Export
  1. Go to Export/Import.

  2. Select Export.

  3. Create a password that contains at least 6 characters. You’ll need the password to import the file into the Desktop Wallet so keep it safe.

  4. Navigate to the location on your computer where you want to save the file. If you’re on Windows, make sure that All Files is selected in Save as type. Give the file a name and the extension .json, and then click Save. Once the export is complete, Concordium recommends that you store the file in a safe location that is different from where you store the Desktop Wallet database.

Import
  1. Go to Export/Import.

  2. Select Import and navigate to the location on your computer where you saved the file, and then select Open.

  3. Enter the password of the import. If the import is successful, you can see all the imported identities, accounts, and addresses in the right pane.

Recover accounts without a backup file

If, for some reason, you’ve lost one or more of your accounts in the Desktop Wallet, and you’ve also lost the backup file, you can use the LEDGER device to recover those accounts.

You only have to perform a recovery if you have lost the backup of your accounts and identities. If you still have the backup file, you can import the accounts back into the Desktop Wallet.

If you’ve lost your LEDGER device or the device has stopped working, you can restore the keys in another LEDGER device by by restoring it from the recovery phrase used for the original device. To learn more about the recovery phrase of a LEDGER device, see LEDGER’s documentation: What is a recovery phrase .

How the recovery process works

When you create a new identity in the Desktop Wallet, a number on the LEDGER device is associated with the identity. This is called the identity index and there can be more identity indices on a LEDGER device. These indices are used sequentially, so the first identity created from a LEDGER device uses index 0, the next uses index 1, and so on.

The LEDGER device stores data about the credentials that belong to an identity. The keys you use to sign account transactions are all attached to credentials. It’s the credentials on an account that determine who’s allowed to sign transactions. To learn more about identities, see Identities and accounts.

Lost identities can’t be recovered because the identity object is not stored on the LEDGER device. However, you can go through each index on the LEDGER device where the data to create credentials are stored and use this information to regain access to the accounts related to a given identity.

For each identity index, the recovery process uses the LEDGER device to calculate the IDs of the credentials, which also have sequential indices. The wallet then checks on the blockchain whether the credentials have been deployed, and which account each credential is attached to. These accounts are then added to the Desktop Wallet along with the deployed credentials.

If all your identity issuances were successful, you can stop the recovery when you encounter an unused index. However, if one of your identity issuance processes failed, this might have caused an index to be skipped. Therefore, you must determine yourself when the recovery is completed.

The recovery also creates placeholders for the missing identities to indicate that the index has already been used. However, the information used to create new accounts and credentials on a missing identity can’t be recovered because it doesn’t exist on the blockchain. That’s why you can’t create new accounts using these placeholders. Instead, you can request a new identity from an identity provider.

The names of the accounts and the notes on the credentials are also not recoverable because they are only saved locally.

Incomplete backups

If you have imported accounts from a backup file and you know there are accounts missing on one or more identities, you can go through the recovery process to recover the missing accounts.

How to recover accounts

  1. In the Desktop Wallet, go to Settings, and then select Recover existing accounts.

  2. Familiarize yourself with the recovery information, and then select Continue.

  3. Connect the LEDGER device to the computer if you haven’t done so already, and then select Submit.

  4. In the Desktop Wallet, there’s a message saying Please allow recovering credentials. The LEDGER device says Recover credentials. In the right pane, you can see the indices that are found, and the accounts, if any, associated with each index.

  5. When you consider the recovery complete, select Stop recovery, I found all my accounts. You then see an overview of all the recovered accounts. If you don’t think the recovery is complete, you can go back and continue the recovery process.

  6. To view the recovered accounts, go to Accounts. A recovered account doesn’t have the name you originally gave it. Instead the name consists of the first eight digits of the account address. Furthermore, because the identities are not recovered, the accounts show the index number that’s associated with the identity and not the identity itself.

  7. To view placeholders for identities, go to Identities. Here you can see placeholders for the missing identities. These placeholders show the index numbers that have been used. You can’t use the placeholders to create new accounts.

Concordium Legacy Wallet

Warning

Backup is essential. If you lose your mobile phone or need to restore your mobile phone and you don’t have a backup from the Mobile Wallet, you can’t access your wallet and your CCDs are permanently inaccessible. Concordium does not take any responsibility if you lose access to your accounts. Concordium strongly advise you to complete a backup every time you create an account and store the backup file in a secure place - preferably offline.

Because the Concordium Legacy Wallet does not use a secret recovery phrase, your backup file is the only way you can restore your account keys should you lose your phone or have to re-install your phone or wallet. You will permanently lose access to your wallet if you do not have a backup of your private key file. Concordium cannot recover your private keys if you lose them. If you don’t make a backup file you will lose access to your tokens forever.

If you set up a new phone and transfer the wallet, you will lose the private keys; they can only be recovered from the pre-exported backup file.

Account keys are not stored in the cloud, only on the device itself in order to protect your security.

A new backup file should be exported EVERY time a new account is made, otherwise keys for the account can´t be recovered.

The Concordium Legacy Wallet provides built-in functionality to export wallet backups, encrypted under a passcode you choose. The wallet backup contains the keys for all wallet accounts. Each account has its own keys. Every time you make a new account in your wallet, you have to make a wallet backup to include the newly created account keys.

Even if you have access to the wallet and can see the accounts after a phone restoration operation or similar action, the keys to the accounts on the wallet may be missing, in which case you don’t have access to the CCDs. The following describes how you can check if you have the necessary keys and access to your accounts.

Export

Warning

The only way to ensure that your backup includes the keys for all of your accounts is to follow the instructions below. Any backup made in any other way (e.g., backup of mobile phone) will NOT include your account keys and may result in you losing access to your accounts.

  1. Tap Backup in the lower left corner.

  2. Enter your biometrics or app passcode.

  3. Read the information about the export and tap Continue.

  4. Choose a password with a minimum of 6 characters to encrypt your export. Make sure to choose a secure password and keep it safe. Anyone with the password will be able to unlock the export and make transfers from your account. Tap Continue.

  5. Choose an option for sending or saving the export file, such as Mail.

Concordium strongly recommends that you store the backup file in a safe location and not on the phone itself. It’s also vital that you keep the password to the backup file safe. Anyone with access to the file can gain access to your crypto assets. Concordium is not able to recover backup passwords.

How to check that you have your account keys

The app does not indicate if it has the keys to the accounts. To check whether the app has the keys for all accounts, do the following:

  1. Open your wallet.

  2. Create one new account for each of your identities.

If this succeeds for all identities, the wallet has all the necessary account keys. The wallet does not have the keys to the accounts created under identities where this fails.

Import

Depending on whether you are using an Android phone or an iPhone, the import process differs slightly.

Android
  1. Go to the Three dots button page.

  2. Tap Restore Backup.

  3. Use the Android system prompt to browse to your export and select the file.

  4. Enter the password you chose upon making the export.

  5. Enter your biometrics or app passcode.

  6. Review your import and tap Ok, thanks.

iOS
  1. Find the file you want to import on your iPhone.

  2. Choose the iOS “Share” option. Choose Concordium Mobile Wallet as the app to open the file.

  3. Enter the password you chose upon making the export.

  4. Enter your biometrics or app passcode.

  5. Review your import and tap Ok, thanks.

Concordium Wallet for Android and Concordium Wallet for Web

Backup is not available in Concordium Wallet for Android or Concordium Wallet for Web. It uses a secret recovery phrase to recover your accounts, identities, and private keys. For information about recovering your Concordium Legacy Wallet wallet, see above.