How Your Recovery Phrase Works
Buzzio accounts are not unlocked with a phone-number SMS code. They are unlocked with a 12-word recovery phrase generated on your device (sometimes called a seed or mnemonic). This page explains how it works, why Buzzio uses it, and how secure it is.
Why a recovery phrase instead of SMS reset
Most messengers glue your account to a phone number so they can “reset” access with an SMS. That is convenient — and it also means your chat identity is tied to a carrier number forever.
Buzzio takes a different path:
- Your public address is a random Buzzio ID.
- Your messaging keys are derived from a 12-word recovery phrase created on your phone.
- Buzzio never receives that phrase or your private messaging keys.
The phrase lets you move to a new phone with Buzzio ID + recovery phrase — without handing us a personal phone number as the master key to your account.
What the recovery phrase is
At account creation, Buzzio generates a 12-word phrase on-device using a standard BIP-39 mnemonic word list.
That phrase is the human-readable form of high-entropy secret material. From it, the app derives your messaging private keys locally (including strong key derivation such as PBKDF2 on device). Only public key material is published so others can encrypt to you.
Important: the Buzzio ID is not mathematically derived from the phrase. The ID and the phrase are separate. Restoring an account always needs both.
How secure it is
Generated on your device
The phrase is created on the phone. It is stored in the device’s secure storage for the app — not uploaded as a plaintext backup Buzzio can read.
Buzzio cannot reset it
Because we never receive the phrase, we also cannot:
- Email you a replacement phrase
- SMS-reset your private keys
- Rebuild your sealed chat keys if the phrase is gone
That is intentional. If we could reset your keys, we would be holding the power to become a custodian of your identity.
Strength of a 12-word BIP-39 phrase
A properly generated 12-word BIP-39 mnemonic carries a large search space — far beyond guessing by hand or casual brute force. Security still depends on you keeping the phrase private. The cryptography does not help if the words are shared, photographed into chat, or stored in an unlocked notes app.
Separate from chat backup keys
Optional encrypted backup uses a recovery key you set, separate from the 12-word account phrase. Losing one is not the same as losing the other — but losing the phrase without any unlockable backup means those private messaging keys cannot be rebuilt.
What the phrase unlocks
| With the phrase + Buzzio ID | Without them |
|---|---|
| Restore identity on a new phone | No SMS fallback for the account itself |
| Re-derive messaging keys on-device | Buzzio cannot recreate private keys |
| Optional wallet (if enabled) may share the same phrase on a separate path | Treat the phrase as control of chat keys and wallet funds if you activated the wallet |
How to keep it safe
- Write the 12 words down offline (paper or a password manager you trust).
- Store your Buzzio ID with them — you need both to sign in.
- Never paste the phrase into a chat, bio, username, or support email.
- Do not share screenshots of the recovery screen.
- If you enable the Bitcoin wallet, remember the same phrase can control funds — protect it harder.
Honest tradeoff
A recovery-phrase account is stronger against SIM-swap and phone-number account takeovers. The tradeoff is personal responsibility: lose every device and the phrase (with no unlockable backup), and those private keys are gone for good. Buzzio will not — and cannot — soft-reset that for you.