Sign in

v1

latestOpenAPI 3.1.02026-07-13143194365.4 KB
auth

Start account recovery with secondary identity

Start the account recovery flow using a secondary verified identity.

If you've lost access to your primary identity (e.g., lost email access), you can recover your account using any other verified identity linked to it.

Requirements:

  • The identifier must be a secondary (non-primary) verified identity
  • Cannot recover using a handle

Flow:

  1. Provide a secondary identity (email, phone, or wallet address)
  2. Receive auth method details
  3. For email/SMS: Complete CDP OTP verification
  4. For wallet: Sign the challenge message
  5. Call /auth/recover/complete with the credential

Note: Recovery issues a JWT with the original primary identity subject. The primary identity remains unchanged.

post/v1/auth/recover/start

Request body

identifierstring required

Secondary identity to recover with (email, phone, or wallet address)

Response

Successful Response

recovery_tokenstring required

Signed session token (use in recovery/complete). Contains all session state - no server storage required.

identity_typestring required

Identity type being used for recovery

identity_valuestring required

Masked identity value

auth_methodstring required

Authentication method: 'cdp_otp' or 'signature'

challenge_messagestring nullable

Challenge message to sign (for wallet recovery)