Losing or replacing a device
Your identity key is encrypted to you, not to a device — devices are just places the key is cached. So moving to a new machine, or losing one, never strands your credentials, as long as you have an unlock method.
Setting up a new browser or laptop
Section titled “Setting up a new browser or laptop”- Sign in as normal on the new device. SafeHanded sees no cached key.
- Choose Unlock when SafeHanded prompts you (or Unlock on this browser on the Keys page) and use a PRF-capable passkey or your recovery phrase.
- The key is cached on this device and it appears in your device list with a name. Previously submitted requests are immediately readable.
Forgetting the key on a shared or public browser
Section titled “Forgetting the key on a shared or public browser”If you unlocked on a browser you don’t control — a shared machine, a customer’s PC — remove the cached key when you’re done:
- Go to the Keys page.
- Under this browser, choose Forget key on this browser.
Your cached keys are removed from this browser; anyone else’s who uses the same browser profile are left alone. Your key itself is unaffected; you can unlock again later.
Revoking a lost device
Section titled “Revoking a lost device”If a device is lost or stolen:
- On the Keys page, open Devices and choose Revoke next to the lost device. Devices are personal: only you can revoke your own.
- Sessions on that device are ended and it can no longer reveal credentials.
If you can’t get to another device, ask an Admin to disable your membership for now — that also ends your sessions. See When a technician leaves.
Because a reveal always needs a live passkey step-up as well as an unlocked key, a lost laptop without your passkey can’t reveal anything on its own — but revoke it anyway to be certain.
If the lost device held your only passkey, add a new one with your recovery code and remove the lost one — see If you’ve lost your passkey.
When a technician leaves
Section titled “When a technician leaves”Offboarding is handled by an Admin from the offboarding page, which sorts that person’s outstanding requests into what needs a new link, what the team can still recover, and what can’t be recovered. See When a technician leaves.