Wallet Export & Portability

Wallet export is a core feature of Planbok that allows users and organizations to reconstruct their full private keys for use in external wallet applications. This functionality ensures that assets are truly non-custodial and portable, preventing vendor lock-in.

Conceptual Overview

In a 2-of-2 MPC system, no single party holds the private key. However, by combining the two key shares along with the necessary blinding secrets (the user's PIN or the Organization Secret), the full private key can be mathematically reconstructed.

How it Works

1. Authorization: The user or organization owner initiates an "Export" request and provides their secret.
2. Combine Shares: Node 1 and Node 2 collaborate to provide the necessary key material.
3. Key Reconstruction: The server-side logic combines the shares, decrypts them using the client-provided secret, and reconstructs the master private key.
4. HD Derivation: Individual private keys for specific wallets (e.g., Ethereum, Bitcoin) are derived from the reconstructed master key using standard derivation paths.
5. Secure Delivery: The resulting private keys are formatted into a secure CSV and delivered to the authorized user.

Exportability Rules

The ability to export a wallet depends on the custody model chosen:

Customer Custody Wallets

• Status: Always Exportable
• Requirements: User PIN and recovery salt.
• Portability: Users can export their keys at any time to move to external wallets like MetaMask, Phantom, Trust Wallet, or UniSat.

Organizational Wallets (Standard MPC)

• Status: Non-Exportable
• Why: Since both shares are managed by Planbok's automated infrastructure (without a client-side secret), allowing automated export would create a security vulnerability for the treasury.
• Security Goal: To provide a managed institutional experience where assets are protected by organizational RBAC.

Organizational Wallets (Trustless MPC)

• Status: Exportable
• Requirements: Organization Secret (provided by Owner).
• Control: By using the Trustless model, the organization maintains the final authority to export their keys, ensuring sovereign control over institutional assets.

Compatibility

Private keys exported from Planbok are standard ECDSA (secp256k1) or EdDSA (ed25519) keys. They are fully compatible with any wallet that supports these industry standards:

• EVM Chains: MetaMask, Rabby, Coinbase Wallet.
• Solana: Phantom, Solflare.
• Bitcoin: UniSat, Xverse.
• Near: MyNearWallet.
• Cosmos/Other: Keplr, Trust Wallet.

[!IMPORTANT] Exporting your private keys is a highly sensitive operation. Once exported, the security of your assets depends entirely on how you store those keys. Planbok recommends using a hardware wallet or other secure long-term storage for exported material.