> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dfns.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Account recovery

> API endpoints to recover access to a Dfns user account when a passkey or device is lost, using recovery codes and verification flows.

export const Post = props => {
  return <code style={{
    paddingLeft: 0,
    paddingTop: 0
  }}>
      <Badge color="blue" size="sm">POST</Badge>
      <span style={{
    marginLeft: '0.5em'
  }}>{props.children}</span>
    </code>;
};

Users can recover their Dfns accounts using recovery credentials. When a recovery credential is used, all existing credentials (both regular and recovery) are invalidated for security. The user must create new credentials during the recovery process.

A recovery credential is an encrypted private key that Dfns stores on your behalf. The encryption is performed by the frontend that created the credential — Dfns never has access to the decryption password. This means recovery must happen through the same frontend that registered the credential:

* **Dashboard users**: If the user registered through the Dfns dashboard, they recover via the dashboard at [app.dfns.io/recover](https://app.dfns.io/recover).
* **End users on your app**: If the user registered through your application (delegated registration), you must implement the recovery flow in your application using the recovery APIs. Dfns provides the APIs and recommendations, but you control the full recovery UX and encryption scheme.

## Guides

<CardGroup>
  <Card title="Recover your account" href="/guides/recover-your-account">
    Step-by-step guide for employees to recover their account using the dashboard.
  </Card>

  <Card title="Implement end-user recovery" href="/guides/developers/end-user-recovery">
    Developer guide for implementing recovery flows for delegated wallet users.
  </Card>
</CardGroup>

## Related endpoints

* <Post>/auth/recover/init</Post> – [Create recovery challenge](/api-reference/auth/create-recovery-challenge)
* <Post>/auth/recover/user/delegated</Post> – [Create delegated recovery challenge](/api-reference/auth/create-delegated-recovery-challenge)
* <Post>/auth/recover/user</Post> – [Recover user](/api-reference/auth/recover-user)