NOVA identifies recoverable wallets
The app includes active and archived software wallets backed by a recovery phrase or raw private key. It excludes hardware and watch-only wallets.
Official recovery explainer
NOVA encrypts recoverable software-wallet secrets before writing one current recovery record to the app's iCloud key-value store. A matching PIN or pattern is required to restore. Hardware and watch-only wallets are not included.
Backup flow
The app includes active and archived software wallets backed by a recovery phrase or raw private key. It excludes hardware and watch-only wallets.
You choose a four-digit PIN or a pattern of at least four points. NOVA derives an encryption key on-device and encrypts each wallet secret and the local keystore password with authenticated encryption.
NOVA saves one current record in its iCloud key-value container, requests synchronization, then reads the record back and checks its ID, timestamp, and wallet count. A failed write-time check restores the prior record.
Data boundary
| Data | Current treatment | Why it matters |
|---|---|---|
| Recovery phrase or raw private key | Encrypted by NOVA before iCloud storage. | This is the signing material used to recreate a recoverable software wallet. |
| Local keystore password | Encrypted by NOVA before iCloud storage. | Used to reopen the restored local keystore. |
| Wallet name, ID, type, order, pinned/archive state, account addresses, and some derivation metadata | Readable inside NOVA's iCloud record; not covered by NOVA's per-secret encryption layer. | This metadata helps reconstruct the wallet list and account context but can reveal wallet organization and public addresses. |
| Balances, prices, token lists, charts, transactions, and caches | Not backed up; rebuilt from local or network sources. | A recovery backup is not a full device image or portfolio-history archive. |
| Watch-only wallets | Excluded. | They contain public addresses rather than recoverable signing secrets; re-add them separately. |
| Hardware wallets | Excluded. | The signing key remains with the hardware device; reconnect it separately after restore. |
New-device recovery
If the iCloud store is unavailable, no record is found, the code is wrong, or individual secrets cannot be imported, NOVA reports a failure or partial restore instead of inventing wallet state. This source review did not execute a new-device restore.
Keeping it current
NOVA's V3 format maintains one current recovery record to stay within iCloud key-value storage limits. The app can still read older V2 and legacy full-backup formats during migration.
When backup is enabled and the code remains available locally, NOVA can refresh the current record after wallet changes. Check the latest backup timestamp in Settings instead of assuming a recent import was uploaded.
The read-back check catches many immediate failures. It does not prove that every future device, iCloud state, app version, or recovery attempt will succeed.
FAQ
No. The current implementation encrypts each recovery phrase or raw private key before writing the iCloud record.
No. Wallet-list and account metadata remains readable inside the app's record. The page distinguishes that metadata from encrypted signing secrets.
The current encrypted record cannot be decrypted with a different code. Use your independently stored recovery phrase or private key to import the wallet manually.
No. Reconnect a hardware wallet using its own device and recovery model; re-add a watch-only wallet using its public address.
Evidence and corrections
This page was derived from the current NOVA 4.2.0 backup service, storage format, iCloud Backups settings UI, wallet-import restore flow, and associated source-level contracts on August 29, 2026. Source inspection establishes intended implementation behavior; it is not a cryptographic audit, App Store review, iCloud-provider guarantee, simulator run, or physical-device restore.
Send factual corrections or a reproducible recovery issue to hi@nshield.org. Never include a seed phrase, private key, PIN, pattern, or unredacted backup record.