Most guides on this blog, including our own recovery phrase advice, start from the same assumption: one key, one backup, and if you lose both, the funds are gone for good. That assumption is accurate for a traditional wallet. It is not the only model available on Base anymore. A category of smart wallets now offers guardian based social recovery, a way to regain access to an account through people or devices you trust, without those people ever being able to move your funds on their own.
The problem social recovery tries to solve
A standard self-custody wallet has exactly one point of failure: the private key, usually backed up as a recovery phrase. Lose the phrase and lose the device it lived on, and the funds are unreachable forever. That is the tradeoff of true self-custody. It is also the single biggest reason people hesitate to hold their own crypto instead of leaving it on an exchange.
Social recovery is an attempt to remove that single point of failure without reintroducing a custodian. Instead of one secret that must never be lost, the account is protected by a small group of guardians who can help restore access, but only if enough of them agree, and only through a process that cannot be rushed.
What a guardian actually is
A guardian is an address you have chosen, not a person who holds your funds. It can be another wallet you own on a different device, a hardware wallet kept in a safe, a family member's wallet, or in some setups a service run by the wallet provider itself. Guardians do not hold a piece of your key the way a traditional backup would. They hold the ability to approve one specific action: replacing the signing key on your smart contract wallet.
This is possible because a social recovery wallet is not a simple externally owned account. It is a smart contract wallet, the kind made practical on Base by account abstraction. The contract defines its own rules for who can sign transactions day to day, and separately, who can trigger a recovery.
How the recovery flow works
- Setup. When you create the wallet, you choose a set of guardians and a threshold, for example three guardians out of five. This is configured once and can usually be changed later while you still have normal access.
- Daily use is unaffected. Guardians play no role in ordinary transactions. Every swap, transfer, or approval you make still comes from your own signing key, exactly as it would on any other wallet.
- Losing access. If your device is lost, stolen, or broken and you cannot recover the signing key another way, you reach out to your guardians and ask them to approve a recovery request.
- Guardian approval. Each guardian confirms the request from their own wallet. Once the threshold is met, for example three out of five guardians have signed, the recovery request is considered approved.
- Time lock. Almost every implementation adds a mandatory delay, commonly somewhere between one and several days, before the new key actually takes effect. This window exists specifically so that if the request is fraudulent, either because your guardians were tricked or because an attacker is impersonating you, the real owner has time to notice and cancel it.
- Key replacement. Once the time lock passes with no cancellation, the smart contract activates the new signing key and deactivates the old one. Access is restored, and the funds never left the contract.
What guardians cannot do
This is the detail that makes the model different from a multisig, which we cover separately in our multisig wallet guide. In a multisig, every signer has ongoing authority over spending, and a quorum of them can move funds at any time. In a well designed social recovery wallet, guardians have no spending power at all. They cannot approve a swap, cannot send your tokens, and cannot touch the wallet outside of the specific recovery process, which itself is delayed and cancellable. A single dishonest guardian, or even a majority of dishonest guardians acting without the time lock expiring, still cannot drain the wallet.
The real tradeoffs
Social recovery is not free of risk, it trades one set of risks for another.
- Guardian selection matters. If your guardians are all reachable through the same channel, for example they all use the same email provider or live in the same household, a single point of failure can reappear in a different form.
- The time lock is a double edged feature. It protects you from a fraudulent recovery, but it also means genuine recovery is not instant. If you need funds urgently, this delay is real.
- It depends on the wallet's contract code. The security of the whole scheme rests on the smart contract implementing the recovery module correctly. This is one more reason to only use wallet software from established providers whose contracts have been audited.
- It is not available everywhere. Social recovery is a feature of specific smart wallet implementations, not a universal standard. A wallet has to be built to support it.
Where this fits with Simple Base Swap
Simple Base Swap is a straightforward self-custody wallet built for one network, and it follows the traditional recovery phrase model described throughout this blog. If you use a smart wallet elsewhere that offers guardian based recovery, the concepts above should help you understand what you are actually trusting when you set it up, and what protection it does and does not give you. Whichever model you use, the underlying rule stays the same: understand exactly who or what can move your funds before you rely on it.