Note Security

Losing the note, or showing it to someone else, is the failure that cryptography will not undo.

If you lose every copy

If you did not seal the note, and you have no string left, the funds stay in the treasury and nobody can withdraw them. There is no administrator recovery. There is no password reset.

If you sealed it, reinstall a client, connect the same wallet, sign veilix:notes:v1, and scan. The scan returns unspent notes whose ciphertext opens under that key and whose commitment matches the leaf. Change notes are included when they were sealed at withdrawal time.

The seal is tied to the wallet that signed, not to a particular device.

If someone else sees the note

They can withdraw it to any address the risk check in their client allows, as soon as they can build a proof. You will see the nullifier appear. You cannot cancel a note. If you still have the note too, the race is whoever’s withdrawal lands first.

Do not send note strings through chat, email, or support forms. A truncated display is safe to screenshot. The full string is not.

If the browser closes during Private Send

The deposit may already be confirmed. The withdrawal may not have been submitted. The payment is then an unspent note. The flow downloads a note file before sending when that option is on. Keep that file until the recipient has been paid. If the download was skipped and the note was sealed, scan with the same wallet.

If you only have an old fixed-denomination note

Those notes are a different format. The current trees do not spend them. Keep them only as a record of the old pool. They are not a vx2 balance.

Habits that match the design

• Seal deposits you may need to recover from the wallet alone.
• Keep one offline copy of notes that were not sealed.
• Treat a change note as a new note. It has a new secret, even though the value came from an older one.
• After a withdrawal confirms, the input note is dead. Delete local copies so a later leak cannot confuse you into thinking it is still live. Confirm spend status before you delete the only copy.
• Do not deposit an amount you cannot afford to have publicly associated with the funding wallet. The deposit itself is public.