openclaw - 💡(How to fix) Fix [Bug]: Matrix cannot be recovered using the recovery key. [1 comments, 2 participants]

🦞 OpenClaw 2026.4.26 (unknown) — Hot reload for config, cold sweat for deploys.

Account: [REDACTED_ACCOUNT] Encryption config: already enabled at channels.matrix.accounts.[REDACTED_ACCOUNT] Bootstrap success: no Bootstrap error: MatrixError: [400] One time key signed_curve25519:[REDACTED_OTK_ID] already exists. Old key: {"key":"[REDACTED_OLD_CURVE25519_KEY]","signatures":{"@[REDACTED_USER]:[REDACTED_DOMAIN]":{"ed25519:[REDACTED_DEVICE_ID]":"[REDACTED_OLD_SIGNATURE]"}}}; new key: {'key': '[REDACTED_NEW_CURVE25519_KEY]', 'signatures': {'@[REDACTED_USER]:[REDACTED_DOMAIN]': {'ed25519:[REDACTED_DEVICE_ID]': '[REDACTED_NEW_SIGNATURE]'}}} (http://[REDACTED_INTERNAL_SERVER]:[REDACTED_PORT]/_matrix/client/v3/keys/upload) Verified by owner: no Backup: present but backup key unavailable on this device Backup version: [REDACTED_VERSION_NUM] Next steps:

• Run the shown printf pipeline with the Matrix recovery key env var for this account: printf '%s\n' "$MATRIX_RECOVERY_KEY_[REDACTED_ACCOUNT]" | openclaw matrix verify device --recovery-key-stdin --account [REDACTED_ACCOUNT]. If you do not have the recovery key but still have another verified Matrix client, run openclaw matrix verify self --account [REDACTED_ACCOUNT] instead.
• Backup key is not loaded on this device. Run openclaw matrix verify backup restore --account [REDACTED_ACCOUNT] to load it and restore old room keys. If restore still cannot load the key, run the shown printf pipeline with the Matrix recovery key env var for this account: printf '%s\n' "$MATRIX_RECOVERY_KEY_[REDACTED_ACCOUNT]" | openclaw matrix verify backup restore --recovery-key-stdin --account [REDACTED_ACCOUNT].

TL;DR

The issue can be resolved by running the openclaw matrix verify device and openclaw matrix verify backup restore commands with the Matrix recovery key to establish full Matrix identity trust and load the backup key.

Guidance

• The error message indicates that the device lacks full Matrix identity trust, which requires Matrix cross-signing verification.
• Run printf '%s\n' "$MATRIX_RECOVERY_KEY_[REDACTED_ACCOUNT]" | openclaw matrix verify device --recovery-key-stdin --account [REDACTED_ACCOUNT] to apply the recovery key and verify the device.
• Run openclaw matrix verify backup restore --account [REDACTED_ACCOUNT] to load the backup key and restore old room keys.
• If the restore still cannot load the key, run printf '%s\n' "$MATRIX_RECOVERY_KEY_[REDACTED_ACCOUNT]" | openclaw matrix verify backup restore --recovery-key-stdin --account [REDACTED_ACCOUNT].

Notes

The provided solution assumes that the Matrix recovery key is available and correctly set as an environment variable. If the recovery key is not available, an alternative approach using another verified Matrix client may be necessary.

Recommendation

Apply the workaround by running the specified openclaw commands with the Matrix recovery key to establish full Matrix identity trust and load the backup key. This approach is recommended because it directly addresses the error messages and provides a clear path to resolving the issue.