Why a private recovery key matters for phone recovery
A recovery page should never reveal phone location or photos to random visitors. A private recovery key helps connect the correct owner to the correct device record.
Human validation comes first
Cloudflare Turnstile helps confirm that the visitor is likely human before the server checks the recovery key. This reduces spam and automated guessing.
The key should stay secret
The private key should be stored safely by the owner and sent only over HTTPS to the recovery endpoint. On the backend, keys should be hashed rather than stored as plain text.
What the result can show
A real recovery result can show device status, last seen time, location, map link, captured evidence, and next steps for the owner.
Use the secure flow:
Recover my phone
Recover my phone