Access

Passkey migration and email recovery

Two critical flows redesigned to feel effortless, even though the backend behind them was anything but.

UX/UI Design

UX Research

2025

I designed two flows that protect the most valuable thing in a self-custodial wallet: access. First, migrating every existing passkey to a new domain during a full product rebrand. Second, introducing email based account recovery so non-crypto users can get back into their wallet without seed phrases, guardians, or technical knowledge. Both challenges had multiple competing constraints: security, browser limitations, PWA behavior and yet the final experiences feel almost boring. That’s the benchmark of success.

Gnosis rebranded to a new domain. Passkeys don’t transfer automatically, they are cryptographically tied to the domain where they were created. Losing access wasn’t an option. The backend research spanned related-origin permissions, cross-domain iframes, and fallback update transactions. On the resulting UX surface, the entire migration takes one tap: create a new passkey on the new domain, confirm, done. Something that took engineers weeks of edge-case handling became a 10 second interaction. At the same time, we designed a new recovery model for everyday users. Standard crypto solutions (social guardians, multi-party proofs, ZK recovery) were too technical for our target audience. The team evaluated options ranging from hardware guardians to email-to-wallet lookups. The final model uses an email + time delay safeguard, letting users regain access without ever touching private keys. It feels familiar and secure like any modern fintech recovery flow, even though behind the scenes it interacts with smart contracts and ownership rights. Both flows share the same philosophy: hide the machinery, show only certainty. If people don’t notice the complexity, we did the job right.

Make your brand exceptional — let's connect

©

2025