Primary for everyday use.
Recovery when it matters.

01SYSTEM OVERVIEW

Two permissions, deliberately kept apart.

The Primary key is the device you use for normal Vault activity. The Recovery key is not a spare copy of Primary: it holds a different permission, intended only to authorize a replacement when Primary is no longer safe or available.

Both devices point to the same Vault. Neither device individually owns the assets inside it.

02INITIAL SETUP

Set up both keys once.

Connect Primary and Recovery during onboarding. Vorka reads the provisioning information on each device, identifies its assigned role and asks you to protect the encrypted material with a password.

1. Connect both devices.The app identifies Primary and Recovery automatically.
2. Choose your protection.Use one password for both devices or opt for separate passwords.
3. Finish pairing.Vorka verifies that both devices belong to the same setup.

03VAULT CREATION

Vorka creates one stable Vault.

Once both roles are confirmed, the app creates a dedicated smart-contract Vault configured with the Primary and Recovery addresses. This contract becomes the stable address used to hold and manage supported assets.

Replacing a device changes an authorized role inside the Vault. It does not change the Vault address itself.

Assets live in

The Vault contract

Daily authority

Primary

Replacement authority

Recovery

Private material

Encrypted on your devices

04EVERYDAY USE

Connect Primary when you need to act.

The desktop app detects Primary, unlocks it locally after authentication and prepares the requested Vault operation. You review the destination, amount, network and action before signing.

Your password and private key are not sent to Vorka. The signed operation is submitted to the selected network; only public transaction data leaves the device.

05RECOVERY

Replace access without replacing the Vault.

If Primary is lost, damaged or suspected to be compromised, provision a new Primary device and connect Recovery. Recovery authorizes the Vault to replace the old Primary address with the new one.

1. Prepare a replacement.Provision a new device as Primary.
2. Connect Recovery.Authenticate and review the replacement request.
3. Authorize the change.The Vault removes the old Primary and activates the new one.
4. Store Recovery again.Disconnect it as soon as the replacement is confirmed.

06OPERATING MODE

Choose who maintains the surrounding integrations.

You can change mode later. The underlying Vault and its Primary and Recovery roles remain the same.