Post

Nathan Cain
@nathancain.dev

@atproto.com how do I extract my Private DID Recovery Key out of Bluesky? Figured it would be an easy export for safekeeping offline given the focus on account mobility, but I can’t find the option in the app.

0 reposts1 like

bryan newbold
@bnewbold.net

we think transferring secret keys between devices is a security anti-pattern. what you do is generate a new key on your device, and tell your PDS to add that key as a recovery key for your identity. this isn't super easy/ergonomic quite yet, but see this doc

github.comgithub.com
Nathan Cain
@nathancain.dev

I generally agree (though it can be done securely) Have you considered generating the recovery key locally on the user’s device at signup & presenting it to them to write down? You’d obviously need to block screenshots, and I’m not sure of the consequences if the key is lost versus never having it.