TRUSTED-PERSON RECOVERY

A trusted hand,
when you need one.

Email delivery is in development. It will be enabled in an installer only after the sending service and complete delivery flow are verified.

How the planned email flow works

1. The person installing Steadfast asks a trusted person to hold their recovery credentials and enters that person's email address.
2. A confirmation email asks the trusted person to agree and share a temporary confirmation number. No recovery credentials are included in this first message.
3. After confirmation, Steadfast sends the recovery package to that same address. A separate receipt number from this message must be entered before installation can commit the new credentials.

Two recovery choices

Local password: choose an uninstall password on the PC. That password is never sent to the email service. The trusted person receives the single-use recovery codes.

Trusted person only: the PC generates a random uninstall password and recovery codes, sends them to the trusted person, and does not display them in setup. Only password and code verifiers are retained on the PC.

If an email was unexpected

Ignore a confirmation request you did not agree to. Do not give its number to anyone. No recovery package is sent without that confirmation. To report unwanted requests, contact steadfast.blocker@gmail.com; do not include passwords or recovery codes.

Keep the package private

Give the installer only the temporary confirmation or receipt number. Recovery codes and a generated uninstall password should stay with the trusted person. Each code can authorize a protected change or removal once. Steadfast cannot retrieve original credentials from its storage. The one-hour wait remains a fallback.

Mail will be transactional, with no marketing, tracking pixels, or click tracking. Delivery uses Amazon SES from recovery@notify.steadfastredeemed.com. See the privacy notice for provider and mailbox retention.