Set up - Rhinestone

Configure recovery when an app-origin account is created. Verified-identity recovery lets a user who loses every passkey prove the same email or OAuth identity and add a new passkey to that application’s existing smart account. This managed-wallet flow is separate from SDK guardian recovery, where your application installs and operates its own onchain guardian accounts.

Configure account creation

Add the verified-identity fallback to the same client used for sign-up and login. clientConfig is your provider, client ID, and sponsorship configuration from the shared client initialization:

export const wallet = new WalletClient({
  ...clientConfig,
  recovery: {
    fallback: { type: "verified-identity" },
  },
});

For the EVM account, the embedded wallet SDK first attempts passkey-based recovery using the passkey provider’s PRF capability. The configured fallback applies only when passkey-based recovery is unavailable. recovery.fallback is an account-creation policy. Adding it to a client later does not retrofit recovery onto an already-created account.

Keep the account namespace unchanged. clientId selects registered application metadata; it does not move recovery to the hosted provider’s centralized WebAuthn namespace. Changing the host name, RP ID, or WebAuthn mode selects another credential, signer, and smart account.

Set up managed Solana recovery

Managed Solana setup requires a verified root, service recovery, and enrollment of every active passkey. Hosted Solana recovery uses the email or OAuth service guardian only: an EVM PRF-derived guardian or backup file does not recover the Solana wallet, and there is no either-guardian policy. Follow Set up a Solana wallet. Do not fund it until the selected cluster reports ready: true; configuring recovery.fallback or completing the backup flow below is not a Solana readiness check.

Open the EVM recovery backup flow

For the EVM account, call setupRecovery() after a successful login or account creation. It opens the authenticated backup flow where the user creates a recovery passphrase and downloads a backup file:

const auth = await wallet.authenticate();
if (!auth.success) throw new Error(auth.error.message);

const recovery = await wallet.setupRecovery();
if (!recovery.completed) {
  throw new Error(recovery.error.message);
}

A completed result means the user completed this backup flow. It does not prove that every recovery mechanism or guardian is ready, so do not use it as a universal “recovery ready” check. Continue with Recover an account for the flow after every usable passkey is lost.

​Configure account creation

​Set up managed Solana recovery

​Open the EVM recovery backup flow

Configure account creation

Set up managed Solana recovery

Open the EVM recovery backup flow