Overview

After you reconstruct your private key material, you can use the Recovery Utility to withdraw your assets from your vault accounts.

Before you begin

Make sure you have the following set up:

• An offline machine with a camera (to reconstruct the private key material and initiate transactions)
• An online machine with a camera (to gather information for transaction creation and to broadcast the transaction)

Additionally, both offline and online machines should have the recovery binary executed.

Creating a withdrawal

To create a withdrawal transaction, there are two options:

Option 1: Fireblocks native Recovery Utility

1. Run the Recovery Utility's binary on both the offline and online machines.
2. On the offline machine, recover your private key material. After you finish the recovery procedure, select Withdraw on the offline machine.
3. On the Withdraw dialog, select the asset you want to withdraw and the withdrawal source, and then enter the destination address in the Recipient Address field.
4. Select Create Transaction. A QR code appears, but don't do anything with this yet.
5. On the online machine, open the Recovery Relay and select Scan QR Code. Now scan the QR code from Step 4 with the online machine's camera.
   
6. A Withdraw asset dialog opens. Complete the following fields:
   1. From Address: Select the address from which you want to withdraw funds.
   2. Memo or Tag field (when applicable): This field only appears when the associated blockchain requires a memo or tag for transactions. Enter the memo or tag for the address you selected.
   3. Additional fields: Depending on the blockchain, additional fields may appear on the dialog. These can include requests for a node address, an API key, and more. Enter this information when these fields appear.
7. After you finish Step 6, select Prepare Transaction on the online machine. A QR code appears. Use the offline machine's camera to scan the QR code.
8. On the offline machine, review the transaction's details. If everything appears correct, select Approve & Sign Transaction. A QR code appears. Use the online machine to scan the QR code.
9. On the online machine, select Confirm and Broadcast on the confirmation dialog. After the broadcasting process finishes, select the transaction hash to go to the relevant blockchain explorer and view the transaction on-chain.

Option 2: Exporting keys to an external wallet

This option can be used if the Recovery Utility does not support a desired asset or functionality. However, it is generally not recommended due to the security risks of transferring a private key to an online device, which could expose your key. Only ECDSA assets such as BTC and ETH work with this option, whereas EdDSA assets such as SOL and TON won't work.  

1. On the offline machine, recover your private key material. 
2. After you finish the recovery procedure, reconstruct your worksapce.
3. In the Recovery Utility, navigate to your desired vault account and asset from which you want to export your private key.
4. Select Show keys.
   
5. Copy and paste the Wallet Import Format (WIF) private key onto a USB drive or other storage device.
   
6. Move the WIF private key to an online device and load it to a third-party wallet.
7. Using the third-party wallet, import your private keys by following this article (note that steps 1 to 3 are only used for the old recovery tool).