Understand Vault
Vault is the optional part of Cedar for balances and account changes you do not want one approval method to control.
Vault protects sensitive actions with 2-of-3 approval: any two of your passkey, phone approval on your trusted phone, and recovery phrase. No one method can create Vault, send directly from it, or change its protected settings alone. Regular activity normally pairs your passkey with phone approval, while the recovery phrase stays offline for recovery and supported backup paths.
This stronger review takes more time than Pocket’s one-passkey flow. Use Pocket for routine activity and Vault when the extra check is worth it. Read How Cedar protects Pocket and Vault before setup.
What Vault handles
Section titled “What Vault handles”- Hold balances separately from routine Pocket spending.
- Send from Vault and approve supported Vault requests from crypto apps.
- Set, change, or remove spending limits that control how much can be made available to Pocket.
- Replace a passkey, trusted phone, or recovery phrase through supported security flows.
- Add a recovery path for Pocket through the protection completed during Vault setup.
Vault is ready only when Cedar has both created it on every required network and turned on Pocket protection. If you stop partway through, protected sends, spending-limit changes, and new Vault app connections remain blocked. Cedar Wallet for iOS resumes the unfinished protection step instead of starting it again.
Using Vault
Section titled “Using Vault”Vault actions usually require your passkey and phone approval. Cedar Wallet for iOS is the main place to set up Vault and finish protected actions. If you start supported work from the web app or browser extension, Cedar may ask you to continue on your trusted phone.
Before approving, compare the account, wallet, network, asset, amount, recipient, site, and access change with the action you started. The request on your phone should match the first screen.
Reject any Vault request you do not recognize. If one approval method is lost or compromised, the other two can authorize the supported recovery or replacement path.
Pocket protection does not turn everyday Pocket actions into Vault actions. Pocket still uses its normal passkey approval; the protection gives you a recovery path if that passkey is lost.
Recovery phrase
Section titled “Recovery phrase”A fresh Vault setup creates a 12-word recovery phrase. It is one of Vault’s three approval methods, but it is not the normal way to approve activity. Store it privately and offline, and enter it only when you deliberately start a Cedar recovery or supported backup flow.
The recovery phrase cannot control Vault by itself because Vault still requires a second approval method.