Security

Recovery Tool

Your funds are always yours. This open-source tool lets you recover your Botwallet funds using your two 12-word backup mnemonics — even if Botwallet's servers are completely offline.

Launch Recovery Tool View Source Code

1 Why This Exists

Botwallet uses FROST 2-of-2 threshold signing to protect your funds. Your wallet's private key is split into two shares — one held by your AI agent, one held by our server. Neither share alone can sign transactions.

This design means no single breach can steal your money. But it also means you need both shares to recover funds independently.

This tool gives you full, independent access to your funds using only your two backup mnemonics. No servers needed. No dependencies on Botwallet. Just a single HTML file and a browser.

2 How It Works

  1. Enter your S1 mnemonic (Key 1: the 12 words your agent keeps)
  2. Enter your S2 mnemonic (Key 2: the 12 words Botwallet holds, from your dashboard)
  3. The tool derives your wallet address — verify it matches
  4. Enter a destination Solana address (Phantom, Coinbase, exchange, etc.)
  5. Review balances and confirm the sweep
  6. Your funds are sent — check Solscan for confirmation

The tool combines your two key shares mathematically (s = s₁ + s₂ mod l), automatically discovers all SOL and SPL tokens in the wallet, signs a sweep transaction, and submits it directly to Solana's public RPC. Your mnemonics never leave your browser.

3 Security Guarantees

  • Runs entirely in your browser — no server, no backend
  • Works offline — disconnect from internet before entering mnemonics, reconnect only to submit
  • Open source — every line of code is auditable on GitHub
  • Zero tracking — no analytics, cookies, or telemetry of any kind
  • Unminified code — the built HTML file contains readable, unobfuscated JavaScript
  • Single file — download it, save it with your backup words, use it anytime

4 Where to Find Your Mnemonics

Key 1 (S1) — Agent Key Share

Stored on the machine running your AI agent at ~/.botwallet/seeds/<wallet-name>.seed. You can also reveal it with botwallet wallet backup followed by botwallet wallet reveal-backup --code <code>.

Key 2 (S2) — Server Key Share

In the dashboard, open the wallet, then ⋮ → Backup Keys. Key 2 is shown after you verify your identity.

5 Verifying the Tool

The official address is recovery.botwallet.co. Before you enter any backup words, check that your address bar shows exactly that. If you downloaded the file, verify its integrity before using it with real funds:

# Compare the SHA-256 hash of the downloaded file

shasum -a 256 botwallet-recovery.html

Or clone the GitHub repository, read the source code, and build it yourself.

"Your keys, your funds, always. This tool is open source, works offline, and lives on GitHub. You never need anyone's permission to access your own money."