Post

@atproto.com how do I extract my Private DID Recovery Key out of Bluesky? Figured it would be an easy export for safekeeping offline given the focus on account mobility, but I can’t find the option in the app.

bryan newbold

@bnewbold.net

4 Sept 2024

we think transferring secret keys between devices is a security anti-pattern. what you do is generate a new key on your device, and tell your PDS to add that key as a recovery key for your identity. this isn't super easy/ergonomic quite yet, but see this doc

github.comgithub.com

Nathan Cain

@nathancain.dev

I generally agree (though it can be done securely) Have you considered generating the recovery key locally on the user’s device at signup & presenting it to them to write down? You’d obviously need to block screenshots, and I’m not sure of the consequences if the key is lost versus never having it.

4/9/24, 2:52 pm0 reposts1 like

No replies yet.