Recovery

The seed is the real key

The BIP-39 seed (24 words) encodes K_root. Anyone with the seed can reconstruct the dongle on any ESP32-S3 hardware.

Store it physically. Never digitally. Never in cloud.

Recovery procedure

1. Buy a new ESP32-S3 (~€5, any supplier)
2. Download firmware from cryptin.lake8.dev/download
3. Flash the firmware (see Flash Guide)
4. Connect via serial (UART0/CH343 port, 115200 baud)
5. Send command: recover
6. Enter your 24 BIP-39 words when prompted
7. K_identity is restored — all .crin files accessible again

License transfer

After recovery, the new chip has a different K_attestation.

Open Crypt-in app → Settings → Transfer License. The app contacts license.lake8.dev to transfer the entitlement from the old to the new K_attestation (max 3 times per year).