Online
AnteAnteVaults
Home
3 min read

Recovery setup: v1 and v2

Vaults now use a simpler recovery setup. What changed, what stays the same, and how to upgrade a vault on v1.

Every vault has a recovery setup: a few small contracts attached to it that let your guardians start a handoff if you stop checking in, hold the handoff for the grace period, and then send your assets to your recipient.

Vaults created from now on use a simpler version of that setup, v2. Vaults created before it use v1, shown as "v1 (legacy)". Both work, and both follow exactly the same rules.

The upgrade changes how the parts of your recovery setup are connected, not what anyone can do. Your guardians, your recipient, your check-in schedule and your grace period stay exactly as they are.

What changed

v1 (legacy)

Your vaultGrace-period timerGuardian permissionGuardian groupHelper

v2

Your vaultGrace-period timerGuardian permissionGuardian groupYour vault manages it directly
Lines show what each part is attached to. In v2, only the grace-period timer is attached to your vault, the guardian permission is attached to the timer, and the helper your vault used to edit your guardian group is gone.

What that means for you

Only one module on your vault

Only one module is enabled on your vault, the Delay module, instead of two.

Direct guardian changes

When you add or remove a guardian, your vault has direct permissions on the Guardian multisig, without a permission allowlist in between.

Slightly lower fees for guardians

A guardian's request goes straight to the grace-period timer, so starting a handoff costs a little less.

In vault settings → See all contracts, the parts in the drawing above are called: Grace-period timer (Delay module), Guardian permission (Guardian role module), Guardian group (Guardian multisig), Helper (Guardian manager roles, listed in a v1 Recovery Kit)

The contracts, by name

v1 (legacy)

Your vaultmoduleDelay modulemoduleGuardian role modulemoduleRecovery roles moduleenabled when a handoff completesDelay modulemoduleYour vaultpasses guardians' requests onGuardian role modulememberGuardian multisigchecksDead man's switch (DMS)Guardian multisigsignersYour guardianseach through a 1-of-1 SafemoduleGuardian manager rolesallowlist for your vault's editsguardScope guardcalls Guardian role module only

v2

Your vaultmoduleDelay modulemoduleRecovery roles moduleenabled when a handoff completesDelay modulemoduleGuardian role moduleGuardian role modulememberGuardian multisigchecksDead man's switch (DMS)Guardian multisigsignersYour guardianseach through a 1-of-1 SafemoduleYour vaultedits guardians directlyguardScope guardcalls Guardian role module only
Each card is one contract, named as in vault settings → See all contracts. "module" rows are the modules enabled on it; rows in blue are the ones that differ between v1 and v2. Guardian manager roles is listed only in a v1 vault's Recovery Kit. The Scope guard isn't listed in the app: it is the guard on the Guardian multisig, the same in both versions.

A handoff, step by step

v1 (legacy)

starts a handoffonly if you missed a check-inpasses it onafter the grace periodsends your assetsA guardianGuardian permissionYour vaultGrace-period timerYour vaultYour recipient

v2

starts a handoffonly if you missed a check-inafter the grace periodsends your assetsA guardianGuardian permissionGrace-period timerYour vaultYour recipient
The only difference is the step your vault no longer has to take. A guardian still can't start a handoff until you've missed a check-in, the grace period still applies, and your assets can still only go to your recipient.

What stays the same

Your vault

Same vault, same address, same assets.

Your people

Your guardians and your recipient.

Your rules

Your check-in schedule and your grace period.

Your control

Check in at any time before the grace period ends and the handoff is cancelled.

What guardians can do

Start a handoff only after you miss a check-in. They can never take your assets themselves.

How to upgrade a v1 vault

Only the vault owner can upgrade, and it takes one transaction.

1

Open your vault settings

On your vault, tap the gear at the top.

2

Choose "See all contracts"

The "Recovery setup" row shows v1 (legacy) or v2.

3

Tap Upgrade

Under "Upgrade recovery setup". The app shows any network fee before you confirm.

4

Wait for it to confirm

When it has, the "Recovery setup" row reads v2.

Don't see the Upgrade button? It only shows to the vault's owner, and not while something on a clock needs you first: an overdue check-in, or a handoff that has started or finished. Check in, and it comes back. If your vault still shows only "v1 (legacy)", the upgrade isn't available for it yet, and your vault keeps working as it is.

Questions

Do I have to upgrade?

No. A vault on v1 keeps working exactly as it does today, and there is no deadline.

Do my guardians or my recipient need to do anything?

No. They don't sign anything, and nothing changes in what they see or can do.

Is v2 more secure?

Yes, against one kind of risk. On v1 the Guardian role module, a Roles module, is enabled directly on your vault, so if a flaw were ever found in the Roles module it could be used to move assets out of a v1 vault straight away. On v2 no Roles module is enabled on your vault while it's in normal use: the Guardian role module is enabled on the Delay module instead, so anything sent through it has to wait out your grace period before it can reach your vault. (The Recovery roles module is enabled on your vault only when a handoff completes, on both versions.) The rules for your guardians and your recipient are the same on both.

Can I undo the upgrade?

The app doesn't offer a way back, and you won't need one: v2 does everything v1 does.

Related Articles

Guardians4 minContinuity Timeline4 minVaults3 min