Security model
Pocket and Vault deliberately protect different jobs. Pocket keeps routine activity simple. Vault requires an extra approval for protected balances and security changes.
| Vault | ||
|---|---|---|
| Normal approval | Passkey | Any two methods; normally passkey + phone |
| Best suited to | Everyday balances and crypto apps | Protected balances and sensitive changes |
| Main trade-off | One passkey can approve routine actions | More setup and another approval |
| Recovery | Vault can recover it after setup | Two remaining methods can replace one |
Three separate approval methods
Section titled “Three separate approval methods”| Method | Main job | Where the secret stays |
|---|---|---|
| Passkey | Sign-in, Pocket, and one Vault approval | Your authenticator or passkey provider |
| Phone approval | Normal second Vault approval | Device-only storage on the approval iPhone |
| Recovery phrase | Recovery and supported replacement paths | Your private offline copy |
Cedar’s service coordinates account state and wallet requests. It receives public verification material and signed approvals, not these private secrets. Self-custody does not remove the need to review the action Cedar shows.
Pocket stays quick
Section titled “Pocket stays quick”Normal Pocket actions need one passkey. Someone who can use that passkey may be able to approve Pocket sends or app requests, so keep only routine balances there.
Vault setup adds Pocket protection: Vault can replace Pocket’s passkey after a safety delay. It does not change ordinary Pocket actions into 2-of-3 actions.
Vault requires two
Section titled “Vault requires two”Vault records three approval methods and requires two. Regular use combines the passkey and phone approval; the recovery phrase stays offline.
A spending limit is a deliberate exception. Vault uses two approvals to set the rule, then the Pocket passkey can move only the amount allowed by that rule.
Recovery boundaries
Section titled “Recovery boundaries”- Lost passkey: current approval phone + recovery phrase.
- Lost approval phone: passkey + recovery phrase.
- Lost recovery phrase: passkey + current approval phone.
- Two lost methods: Cedar cannot meet Vault’s 2-of-3 threshold.
Phone approval and device-backed recovery are currently iPhone-only. The phone key does not automatically move to a replacement phone.
What Cedar cannot protect against
Section titled “What Cedar cannot protect against”- Someone controlling two Vault methods can meet its threshold.
- A valid approval cannot prove that a recipient, token, site, or contract is safe.
- Confirmed blockchain activity is generally irreversible.
- Pocket remains a one-passkey wallet for normal activity.
- Software, networks, passkey providers, devices, and Cedar’s service can fail or become unavailable.