Skip to main content
When a recovery is requested for a backup, everyone on that backup’s Access Control List (ACL) is asked to approve it. A simple majority is required before any material is released. This guide is for that approval.

You’ll be notified

A pending recovery reaches you two ways — an email, and the notifications bell at the top right of Control. Both take you to the request.

Approve or reject

1

Open the request

From the email or the bell, open the recovery request.
2

Review it

You’ll see the backup, the type of recovery, and how many approvers have voted so far.
3

Verify your identity

Before your approval is recorded, you complete a fresh identity check. This confirms it’s really you approving, at the moment of approval — a recent sign-in isn’t enough on its own. If your organisation has hardware security keys enabled, you’ll also be asked to tap your registered security key as part of this step.
4

Approve or reject

Approve to add your vote toward the majority, or reject to decline the recovery.
Your vote is final once you confirm it. Review the request carefully before confirming.

What happens next

Once a simple majority of the ACL has approved, the recovery is authorised and the encrypted package is prepared for the requester to download. Only members of that backup’s ACL can approve its recovery.

What’s next

Recover key material

The requester’s side of a recovery.

Vote on an ACL change

The other thing an approver is asked to vote on.

Get started

Set up your account and find your way around Control.