Getting started: keys, passphrase and recovery code

The first time you open Secure Rooms, a short setup wizard runs once.

1. Key generation

Your browser generates your cryptographic identity: a pair of keys for key exchange (X25519) and a pair for signatures (Ed25519). Only the public keys are uploaded to the server. The private keys never leave your device in readable form.

2. Passphrase

You create a passphrase that protects the encrypted backup of your private keys:

• minimum 12 characters;
• must not match your account password;
• a strength indicator helps you choose a strong one.

An encrypted backup of your private keys is stored on the server so you can restore access on a new device. The backup is encrypted with a key derived from your passphrase (Argon2id) - the server does not know your passphrase and cannot decrypt the backup.

3. Recovery code

The wizard shows a recovery code (8 groups of 5 characters) exactly once. It is a second, independent way to restore your keys. Save it offline - on paper or in a password manager. You must confirm that you saved it before setup finishes.

4. "Remember this device" (optional)

By default you enter your passphrase each time you unlock Secure Rooms. You can optionally enable "Remember this device" for 30 days: the unlocked keys are stored in the browser's IndexedDB, wrapped with a non-extractable WebCrypto key. The option is off by default; do not enable it on shared devices.

If you lose both the passphrase and the recovery code

There is no way to restore access to your message history. The server stores only ciphertext and cannot reset your passphrase or decrypt anything for you. Your account itself is unaffected, and you can generate a new identity, but previously received messages will remain unreadable.