You are here. See how this question connects to other ideas.
Select a node to open its page · Expand to read within the map
One question
Can a DID always be recovered after losing a key?
Recovery depends on the method and the control arrangements already in place.
A DID is an identifier, not an automatic account-recovery service. Rotation, revocation and recovery depend on the DID method (the rules for creating and updating that kind of identifier) and its control arrangements.
Ask before a loss: what authorizes an update if the everyday key is unavailable? Must recovery be configured beforehand? How will applications learn that an old key is no longer valid?
Creating a DID and managing it over time are different capabilities. Follow the actual wallet and method’s backup and recovery instructions; an architectural possibility is not evidence that protection is already configured.
Recovering control is not recovering every record
Imagine a photo service using one key for sign-in and another to encrypt photos. A recovery process may let you update DID verification information and sign in again. It does not automatically reconstruct a lost photo-decryption key. Signing and encryption serve different purposes even when a wallet presents them together.
Recovery arrangements also change who can help or intervene. A spare device, recovery participants and a service provider introduce different availability and trust assumptions. Establish what is supported, who approves recovery, any waiting period, and how old credentials and existing application sessions cease to work.
A recovery exercise should test the intended outcomes: signing in, reading older data and regaining any required eligibility evidence. DID Core does not guarantee those product-specific results.
Sources and further reading
Book and sources
This lesson develops the questions in Chapter 4 of 《区块链实战》 with later standards. It is not an excerpt.
Related patent
Blockchain account migration connects this concept to a disclosed technical design and its original patent record.
Migration needs its own authority
A migration signed by the original key can connect an old account to a new address. It cannot produce that signature after the key is completely lost. A query that follows migration history may return a new account even when given the old address; this does not mean the address stayed unchanged. Follow a migration, including assets and historical signatures.
Check your understanding
Can knowing your DID string restore control?
No. Knowing an identifier is different from controlling it; recovery requires supported, established mechanisms.
Continue along a learning path
- Identity, permission and a way outStep 6 of 8
Referenced here
Articles
- New keys, old address: where does the next transfer go?
ArcBlock's account migration design connects old and new addresses. Follow incoming transfers, historical signatures, SDK behavior, and the limits of migration as recovery.
Terms
- DID
A DID is a digital identifier. It helps its holder and a verifier establish who controls an identity and who a claim relates to. It is not a wallet, and it does not replace application accounts, sign-in methods, or permission rules.