If you lose your key

Your hardware key is gone — left on a plane, locked in a defunct laptop, dropped in the ocean. Here is how you get back into your vault.

Before you call

Have these things ready:

• Your recovery code (the 48-character 8×6 grid).
• The email address on your Clavitor account.
• Your verification material. If it points to a photo album or video, have it open. If it references specific items, have them within reach to show on camera. If it is a code phrase, remember it.
• A new hardware key. You will register it during the recovery flow.

You can buy a new hardware key from any reputable seller — YubiKey, SoloKey, Titan Key, Touch ID on a Mac, Windows Hello on a PC. Clavitor does not care which one.

Reach out

Email support@clavitor.ai. Tell us you need to recover and which account it is for. We will reply and invite you to a Zoom call, scheduled during business hours.

On the call, an operator will pull up your account, see the verification material you set, and walk you through confirming it. This usually takes a couple of minutes.

Once verified, the operator will read you a session code on the call. They will not paste it into the chat, email it after, or message it on any other channel — only verbal, only on the call. Write it down.

Back at your browser

Go to clavitor.ai/recover. Enter:

1. Your email address. 2. The session code the operator gave you. 3. Your 48-character recovery code.

Click Recover. Behind the scenes:

• Your browser fetches Clavitor's half of the key.
• Your browser does the math to reconstruct the original key on your device.
• Clavitor's server never sees the reconstructed key.

If the recovery code has a typo, the browser will tell you before sending anything. If the session code has expired (10 minutes), call back and request a new one.

Register your new key

Once recovery succeeds, the browser prompts you to register your new hardware key. Tap it. The browser writes a fresh authentication record that links your new key to the same vault. You are back in.

After you are back

Two things to do, in this order:

1. Generate a fresh recovery code. Your old recovery code still technically works — the human gate is still in front of it — but it is a known artifact now, and you should rotate. Generate a new one, save it somewhere new, confirm you have saved it.

2. Review your account audit log. Every recovery attempt is logged. Look for anything that was not you.

That is it. There is no waiting period, no cooldown. Once you are back, you are back.