Encrypted seed-phrase fallback (recovery flow)

[Miracle656]

Background

Even passkey-first users want a paper backup. An optional, opt-in encrypted seed protects against lost cloud sync.

What to build

An opt-in flow that generates a BIP-39 phrase, encrypts it with a user passphrase, stores in IndexedDB, and registers the derived key as a contract signer.

Key files

• frontend/wallet/lib/recovery.ts (new)
• contracts/wallet/src/signers.rs (extend)

Acceptance criteria

• Opt-in only, off by default
• Recovery restores access on a new device
• Documented threat model trade-off

Drips Wave · Complexity: Advanced · 200 points

[BABAT-CODE]

@BABAT-CODE has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

Dear Maintainer i would love to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @BABAT-CODE to this issue.

[mich-sys]

@mich-sys has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

hi team lead
kindly assign this to me

ℹ️ Repo Maintainers: To accept this application, review their application or assign @mich-sys to this issue.