Zold Getting started
Security and recovery
What protects your account, what you have to protect, and how to get back in if you lose a device.
Two keys, both yours
Your passkey owns the smart wallet and signs you in. It is verified with your fingerprint, face or device PIN and never leaves your device's secure hardware.
Your device key is a second key, generated in your browser the first time you use the account on a device. It signs the exact terms of every payment — the amount, the payee and the transfer — so that even someone who steals your signed-in session cannot change where money goes. Where your authenticator supports it, the device key is encrypted with a secret only your passkey can produce, so each payment needs a passkey ceremony to unlock it.
The dashboard's Security card tells you whether the device key on this device is passkey-protected.
What Zold can and cannot do
- Zold cannot move your money. Every debit is signed by you.
- Zold cannot replace your passkey. Registering a new one needs a confirmation from the current one.
- Zold can pay the network fees for your transactions.
- If you choose Zoldenburg as your recovery guardian, Zoldenburg can start a recovery of your account after checking your identity. It cannot skip the waiting period, and your passkey can cancel it until then.
If you skip recovery, Home shows one line, "Recovery isn't set up", with a link to set it up. You can close that line. Security keeps showing that recovery is off until you turn it on.
Zoldenburg recovery
When you open your account, Zold asks whether Zoldenburg may be your recovery guardian. You can change your answer at any time under Profile → Recovery.
To turn it on: choose Add Zoldenburg as guardian and approve with your passkey. Zoldenburg's guardian is added to your wallet.
To recover on a new device:
- On the sign-in screen choose Lost your passkey? Recover your account and enter the email on your account.
- Create a new passkey on the new device. Zold shows you a reference.
- Email support@zoldhq.com from the address on your account and quote the reference. We check you against the identity Monerium verified when you opened the account.
- Once we have signed, a waiting period (3 days) runs before the change takes effect. During it, the account still belongs to the old passkey. If you did not ask for the recovery, sign in on your old device and cancel it from Profile → Recovery.
- When the period ends, the new passkey becomes the only owner of your wallet. Sessions of the old device are ended and its device key is unbound. Any second signer you added is removed as well.
If you do not choose a guardian: if you lose access to your account or your passkey, Zoldenburg UG cannot recover your account. Only your e-money balance (EURe) can be recovered, from Monerium, its issuer, under Icelandic law. Anything else held in the account cannot be recovered.
The waiting period protects you. Zoldenburg can start a recovery on its own — that is what makes it work when you have lost everything — so the period, and your ability to cancel during it, is what stops anyone from asking for your account in your name.
Email / SMS recovery
Not yet fully live. Email / SMS recovery is not offered yet. The steps below describe how it will work.
To enrol: Profile → Recovery. Register an email address, a phone number, or both. You confirm each with a one-time code, then approve with your passkey. A recovery guardian is added to your wallet. Each channel is masked wherever it is displayed.
To recover on a new device:
- On the sign-in screen choose Lost your passkey? Recover your account and enter your recovery email.
- Create a new passkey on the new device.
- Confirm a one-time code on every channel you registered.
- A waiting period runs before the change takes effect. During it, the account still belongs to the old passkey. If you did not start the recovery, sign in on your old device and cancel it from the Profile screen.
- When the period ends, the new passkey becomes the owner. Sessions of the old device are ended and its device key is unbound.
Sessions
A session ends when you sign out and expires on its own. Signing in on a new device does not sign out others. If you suspect a device is compromised, start a recovery: finalising it revokes every session that device held.