User administered switching mobile devices for uMPC systems
Galaxy Custody Mobile app users can switch their app to a new mobile device without administrator assistance. This may be required when replacing a phone, or when the original phone is lost, stolen, damaged, reset, or no longer available.
Each user sets up their mobile phone application by going through the Recovery phrase generation process to ensure a secure validation process when moving the app to a new device. In the event that the mobile device is changed, lost or broken and cannot be used, the user is able to transfer their account to a new device. This cancels the previous mobile authentication key, and requires regenerating the Recovery phrase on the new device and cancelling the old device.
There are two ways to switch mobile devices:
- Use Previous Phone — use this option when both the old and new devices are available. The switch is completed by scanning a QR code and approving the request from the old device.
- Use Recovery Phrase — use this option when the old device is unavailable. The Recovery Phrase verifies the user and allows the new device to register a new mobile authentication key.
After the switch is completed, the previous mobile device can no longer be used for authentication or signing. If the switch was completed using the Recovery Phrase, the previous Recovery Phrase is invalidated and a new Recovery Phrase must be created and stored securely.
These recovery methods is available only for users created in uMPC or in uMPC-only environments. It is not used for users created in the Impenetrable Vault.
The Lockout period
The lockout period is an important security feature, specifically for situations where the initial device was stolen. Once the Recovery phrase process is completed, login is disabled for both devices, until the process is approved or rejected, so that no illicit transactions can be performed.
The lockout period is set so that there is enough time for a user to report the stolen phone to the administrator, such as over a holiday weekend when the office might be closed.
When the recovery request is initiated, a notification is sent to the original device, if it is reachable. The user can approve or reject the request during the lockout period. If no response is received before the timeout expires, the request is approved automatically. The automatic approval ensures the completion of the process when the old device is broken and you cannot approve the message.
In the event that someone has stolen your original Recovery phrases and uses them to transfer your account to their device, you will receive the Approval message. If you have not initiated the request, then you should reject the request and inform your administrator that your account might be compromised and should be deactivated.
Which method should I use?
Situation | Recommended method |
|---|---|
You have both the old and new phones | Use Previous Phone / QR flow |
The old phone is lost, broken, stolen, reset, or unavailable | Use Recovery Phrase |
You lost the Recovery Phrase but still have the old phone | Regenerate the Recovery Phrase before switching |
You lost both the old phone and the Recovery Phrase | Contact your administrator |
Switching mobile devices with the previous phone
The advantage for changing an existing device to a new one is that you have both devices with you and so the two can work in harmony together.
In this case, the user has both the old and new devices. The switch is completed by scanning a QR code and approving the request from the old device. The Recovery phrase is not required for this process.
After the recovery is completed, the previous mobile device is no longer valid for authentication or signing.
To switch to a new mobile device, you need both devices ready simultaneously:
Open the mobile device app on both phones and select the settings icon
The Settings options open.
Select Switch Phone. The Switch Phone screen appears.
Select Use your previous phone. The QR message appears.
On the New device select, Scan QR data. The QR code reader opens.
Hold the device so that it can scan the QR code from the old device.
When the process is completed, the lockout period starts and a phone switch request message is sent to the old device. You can immediately accept the message on the old device, which ends the lockout period and the account is now active on the new device.
When using the Previous phone process there is no need to regenerate your Recovery phrase as this was not affected by the switch process.
Rejecting the switch request
If the switch request is rejected, the recovery key is deleted from the backend, the user account is deactivated, and administrators are notified.
Switching mobile devices with the Recovery phrase
The Recovery phrase option is available either when you have your previous device or when it is no longer available. This may happen if your phone was lost, stolen, damaged, reset.
Instead of using the old phone to approve the switch by QR code, you enter the Recovery phrase that was created for your user. However, the QR process is more advisable when both phones are available.
You must have your original Recovery phrase created when the account was set up and you logged in to the app for the first time. Without this Recovery phrase you cannot complete this process.
The app uses the phrase to securely verify your identity and register a new mobile authentication key for the new device.
This recovery method is available only for users created in uMPC or in uMPC-only environments. It is not used for users created in the Impenetrable Vault.
After the recovery is completed, the previous mobile device is no longer valid for authentication or signing. A new Recovery phrase is then generated for future recovery, and the previous phrase can no longer be used.
Store your Recovery phrase securely. Do not share it, photograph it, or save it in an unsecured location. Anyone who has access to your Recovery phrase may be able to start a mobile recovery process for your user.
This process includes a lockout period, during which time you are locked out of the both devices. Your administrator has set up your system to keep a new device locked out of your account for a number of days before you can complete the process on the new device.
To switch your account to a new mobile device using the Recovery phrase:
Open the mobile device app on both phones and select the settings icon
The Settings options open.
Select Switch Phone. The Switch Phone screen appears.
Select Use recovery phrase. The Recovery seed screen opens. Type all twelve Recovery phrase words, as well as the IP address.
Check that all of the words are correctly spelled and entered in the correct order.
Select Complete.
The confirmation box appears. Select Complete again.
The lockout period Initialization message displays.
The Environments page in the mobile app now lists your account as Pending Activation.
In the Settings screen the Recovery Phrase option is disabled.
After the Lockout period
The lockout period is to give enough time for the user to report a suspected stolen device so that the account can be removed. However, even in that situation you may wish to complete the process before reporting this to the administrator, as the new account can be restored to your new device safely.
When the lockout period ends the Switch Phone message appears on the old device.
If you have initiated the process, you should approve the switch.
If you have not initiated the process, you should Reject the message and report this immediately to your administrator. The administrator should suspend the account and create a new account for you, as this could be a sign that someone has managed to take over your account or has your seed phrases.
Once the Switch Phone message is approved, the account listed on the mobile app Environment page shows the account as active.
When the device is not available
If you do not have the old device, the system waits a set amount of time before automatically approving the situation, presuming that the original device was lost or broken and cannot be used to approve the message.
If you suspect the device is stolen, it is possible for the thief to reject this request. In this situation, you should contact your administrator, suspend this account and create a new one.
Regenerating the Recovery phrase for the new device
When the account is active on the new device create another Recovery phrase immediately, because, for security purposes, the previous Recovery phrase stops working and can no longer recover the account.
Before creating the new Recovery phrase, the attention icon appears next to the Settings item on the main Sidebar, reminding the user to complete this task.
To set the new Recovery phrase:
Select Settings. The Settings screen opens.
To regenerate a new Recovery phrase, select Recovery Phrase.
The Recovery Phrase page opens. Select Start.
The confirmation window opens. Select Continue.
The Personal Recovery phrase screen opens, listing the 12 words that make up your Recovery phrase and the Server URL address. All of these details must be written down and kept in a secure location.
Review them again to check that all the words are written and spelt correctly and in the correct order. Even if you enter all the words but in the wrong order the recovery process will fail.
After you confirm that you saved the Recovery Phrase, it cannot be displayed again. If you lose it while you still have access to the mobile app, regenerate it immediately.
Select Continue when you have completed your checks.
The confirmation window opens again. Select Complete, the process is finished and a new Recovery phrase is registed for your new device.