Before you begin
Warning
- You should never perform this procedure unless a disaster event has occurred and you need to reconstruct your workspace.
- This procedure reconstructs your private key material. Perform this procedure only on an offline machine. Performing this procedure on an online machine will result in your private key being considered exposed and compromised.
Recovering your workspace's private key material
To recover your private key material:
- Open the Recovery Utility on an offline machine, then select Recover Private Keys (if the Recovery Utility is not already installed on your offline machine, download it on an online computer, transfer the installer via removable media such as a USB drive, and then install it offline. Do not connect the offline machine to any network during this process). You can also select Recover from the left menu.
- Complete the following fields:
- Recovery Kit: Drop or select the full recovery kit ZIP file that you generated or that you received from Fireblocks.
- Recovery Private Key: Drop or select the private key file corresponding to the public key used to encrypt the recovery package.
- Mobile App Recovery Passphrase: Enter the workspace Owner's recovery passphrase. Alternatively, you can upload this passphrase from a .json file (Recovery Utility v1.8.0+). See Upload Passphrase .JSON File.
- Recovery Private Key Passphrase: Enter the passphrase set for the private key file. Alternatively, you can upload this passphrase from a .json file (Recovery Utility v1.8.0+). See Upload Passphrase .JSON File.
- Select Recover.
After the verification process is complete, the Accounts page opens. You can reconstruct your workspace here.
Use auto-generated passphrase
If you auto-generated a passphrase during your workspace's initial setup, select the Use auto-generated passphrase checkbox. Selecting this option causes the following changes:
- The Mobile App Recovery Passphrase field changes to the Auto-Generate Private Key Passphrase field.
- The Auto-Generated Passphrase Private Key field appears.
In the Auto-Generate Private Key Passphrase field, enter the auto-generated passphrase set for the private key file.
In the Auto-Generated Passphrase Private Key field, drop or select the private key file corresponding to the public key used to encrypt the auto-generated passphrase file.
Recovery Tool – Upload Passphrase .JSON File
(Supported starting from Recovery Utility version 1.8.0)
As an alternative to manually entering the Mobile App Recovery Passphrase and the Recovery Private Key Passphrase, you can upload them using a .json file.
The .json file must follow this structure:
“Passphrase”: your passphrase
“rsaKeyPassphrase”: your rsaKeyPassphrase
- passphrase: The Fireblocks Mobile App Recovery Passphrase of the workspace Owner.
- rsaKeyPassphrase: The Recovery Private Key Passphrase (RSA private key passphrase).
Steps:
- In the Recovery Utility app, navigate to Recover.
- Select Upload Passphrase JSON File. You can either drag and drop or manually select the .json file.
- A file selection window opens. Select the .json file and select Open.
- Make sure the field names match the format shown above.
- The app then automatically loads your passphrases. Once both the Recovery Kit and the Recovery Private Key are loaded, you can complete the recovery process.
Learn more about reconstructing your workspace here.