CDP Wallets are secured by a Wallet Secret, which can only be accessed by the wallet owner/developer. Wallet Secrets are asymmetric key pairs used to authenticate with a Trusted Execution Environment. If you lose your Wallet Secret, or you suspect it has been compromised, it is crucial to rotate it promptly to ensure safety of your funds. This action can be performed via the CDP portal.
Once you complete this process, your old Wallet Secret will immediately become invalid and you will no longer be able to use it to authenticate.
Navigate to the CDP Portal and access the Wallet API for your project.
Under Configuration, you should see when your current Wallet Secret was generated. Click the Generate new secret button to rotate your secret.
If you lost access to your 2FA method or never set it up, skip to the 2FA management section to enable it for your account.
Enter the verification code to complete the process.
A modal will appear confirming your request to delete the existing secret. Type delete secret
and click the Delete and generate new secret button.
The secret will be automatically downloaded, but ensure you save it in a secure location. You will not be able to access the secret again without repeating this recovery process.
For better security posture, you should have enabled two-factor authentication (2FA) when you created your wallet.
If you need to change or enable 2FA for your account:
Navigate to the Security dashboard.
Under the 2-step verification tab, you can add additional 2FA methods or enable/disable current methods.
Wallet API v2 Security: Learn more about security features and architecture.