Security

Recovery Tool

Your funds are always yours. This open-source tool lets you recover your Botwallet funds using your two 12-word backup mnemonics — even if Botwallet's servers are completely offline.

Launch Recovery Tool View Source Code

1 Why This Exists

Botwallet uses FROST 2-of-2 threshold signing to protect your funds. Your wallet's private key is split into two shares — one held by your AI agent, one held by our server. Neither share alone can sign transactions.

Neither key share alone can authorize a payment. You need both shares to recover funds independently.

This tool gives you full, independent access to your funds using only your two backup mnemonics. No servers needed. No dependencies on Botwallet. Just a single HTML file and a browser.

2 How It Works

  1. Enter your S1 mnemonic (Key 1: the 12 words your agent keeps)
  2. Enter your S2 mnemonic (Key 2: the 12 words Botwallet holds, from your dashboard)
  3. The tool derives your wallet address — verify it matches
  4. Enter a destination Solana address (Phantom, Coinbase, exchange, etc.)
  5. Review balances and confirm the sweep
  6. Your funds are sent — check Solscan for confirmation

The tool combines your two key shares mathematically (s = s₁ + s₂ mod l), automatically discovers all SOL and SPL tokens in the wallet, signs a sweep transaction, and submits it directly to Solana's public RPC. Your mnemonics never leave your browser.

3 Security Guarantees

  • Runs entirely in your browser — no Botwallet server or backend. It only contacts public Solana RPC endpoints to read balances and send the sweep
  • Works offline — disconnect from internet before entering mnemonics, reconnect only to submit
  • Open source — every line of code is auditable on GitHub
  • No tracking — no analytics, cookies, or telemetry. The hosted page loads its fonts from Google Fonts, so Google can see your IP address when you open it. Your backup words are never sent anywhere
  • Unminified code — the built HTML file contains readable, unobfuscated JavaScript
  • Single file — build it from the source and keep the HTML file with your backups

4 Where to Find Your Mnemonics

Key 1 (S1) — Agent Key Share

Stored on the machine running your AI agent at ~/.botwallet/seeds/<wallet-name>.seed. You can also reveal it with botwallet wallet backup followed by botwallet wallet reveal-backup --code <code>.

Key 2 (S2) — Server Key Share

In the dashboard, open the wallet, then ⋮ → Backup Keys. Key 2 is shown after you verify your identity.

5 Verifying the Tool

The official address is recovery.botwallet.co. Before you enter any backup words, check that your address bar shows exactly that.

We don't publish a downloadable copy with a checksum yet, so there is no official fingerprint to compare a downloaded file against. Only enter your backup words at recovery.botwallet.co or in a copy you built yourself.

To build your own copy, clone the GitHub repository, read the source code, and build it.

"Your keys, your funds, always. This tool is open source, works offline, and lives on GitHub. You never need anyone's permission to access your own money."