openclaw - ✅(Solved) Fix [Bug]: Matrix cannot recover the device using the recovery key. [1 pull requests, 2 comments, 2 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
openclaw/openclaw#70213Fetched 2026-04-23 07:27:42
View on GitHub
Comments
2
Participants
2
Timeline
4
Reactions
0
Author
Timeline (top)
commented ×2cross-referenced ×1labeled ×1

openclaw matrix verify device "Esxx xxxx xxxx xxxx" When using this command to recover the key, the following error always occurs: Verification failed: Matrix device is still not verified by its owner after applying the recovery key. Ensure cross-signing is available and the device is signed.

The matrix server is a locally deployed Synapse.

Error Message

openclaw matrix verify device "Esxx xxxx xxxx xxxx" When using this command to recover the key, the following error always occurs: 5. The following error occurred: Verification failed: Matrix device is still not verified by its owner after applying the recovery key. Ensure cross-signing is available and the device is signed.

Root Cause

openclaw matrix verify device "Esxx xxxx xxxx xxxx" When using this command to recover the key, the following error always occurs: Verification failed: Matrix device is still not verified by its owner after applying the recovery key. Ensure cross-signing is available and the device is signed.

The matrix server is a locally deployed Synapse.

Fix Action

Fixed

PR fix notes

PR #70401: Require full Matrix identity trust

Description (problem / solution / changelog)

Summary

  • require Matrix device owner verification to mean full cross-signing identity trust, not just owner-signed device state
  • add interactive openclaw matrix verify self flow that drives SAS, verifies own identity after SAS completion, and reports final owner-verification diagnostics
  • extend Matrix QA with a live CLI self-verification scenario that asserts verified, crossSigningVerified, signedByOwner, and trusted backup state
  • document recovery-key vs backup usability vs Matrix identity trust, including the expected upstream matrix-js-sdk first-backup diagnostic

Fixes #70213.

Validation

  • pnpm test extensions/matrix/src/matrix/actions/verification.test.ts extensions/matrix/src/matrix/sdk.test.ts extensions/matrix/src/matrix/sdk/crypto-bootstrap.test.ts extensions/matrix/src/cli.test.ts extensions/qa-matrix/src/runners/contract/scenarios.test.ts
  • pnpm build
  • pnpm openclaw qa matrix --provider-mode mock-openai --scenario matrix-e2ee-cli-self-verification --output-dir .artifacts/qa-e2e/matrix-70213-cli-self-verification-full-identity-comment-20260422200000
  • pnpm exec oxfmt --check ...
  • git --no-pager diff --check
  • OPENCLAW_LOCAL_CHECK=0 OPENCLAW_VITEST_MAX_WORKERS=1 pnpm check:changed
  • post-rebase: OPENCLAW_LOCAL_CHECK=0 OPENCLAW_VITEST_MAX_WORKERS=1 pnpm check:changed
  • post-rebase: pnpm build

Changed files

  • CHANGELOG.md (modified, +1/-0)
  • docs/channels/matrix.md (modified, +44/-2)
  • docs/install/migrating-matrix.md (modified, +22/-4)
  • extensions/matrix/src/cli.test.ts (modified, +493/-13)
  • extensions/matrix/src/cli.ts (modified, +810/-73)
  • extensions/matrix/src/matrix/actions/verification.test.ts (modified, +536/-0)
  • extensions/matrix/src/matrix/actions/verification.ts (modified, +312/-9)
  • extensions/matrix/src/matrix/client/logging.test.ts (added, +44/-0)
  • extensions/matrix/src/matrix/client/logging.ts (modified, +94/-28)
  • extensions/matrix/src/matrix/sdk.test.ts (modified, +231/-13)
  • extensions/matrix/src/matrix/sdk.ts (modified, +92/-24)
  • extensions/matrix/src/matrix/sdk/crypto-bootstrap.test.ts (modified, +42/-0)
  • extensions/matrix/src/matrix/sdk/crypto-bootstrap.ts (modified, +10/-4)
  • extensions/matrix/src/matrix/sdk/crypto-facade.test.ts (modified, +63/-0)
  • extensions/matrix/src/matrix/sdk/crypto-facade.ts (modified, +25/-0)
  • extensions/matrix/src/matrix/sdk/recovery-key-store.ts (modified, +52/-24)
  • extensions/matrix/src/matrix/sdk/types.ts (modified, +8/-0)
  • extensions/matrix/src/matrix/sdk/verification-manager.test.ts (modified, +28/-0)
  • extensions/matrix/src/matrix/sdk/verification-manager.ts (modified, +64/-12)
  • extensions/matrix/src/matrix/sdk/verification-status.ts (modified, +1/-1)
  • extensions/qa-matrix/src/runners/contract/runtime.ts (modified, +1/-0)
  • extensions/qa-matrix/src/runners/contract/scenario-catalog.ts (modified, +22/-0)
  • extensions/qa-matrix/src/runners/contract/scenario-runtime-cli.test.ts (added, +44/-0)
  • extensions/qa-matrix/src/runners/contract/scenario-runtime-cli.ts (added, +224/-0)
  • extensions/qa-matrix/src/runners/contract/scenario-runtime-e2ee.ts (modified, +672/-23)
  • extensions/qa-matrix/src/runners/contract/scenario-runtime-shared.ts (modified, +1/-0)
  • extensions/qa-matrix/src/runners/contract/scenario-runtime.ts (modified, +6/-0)
  • extensions/qa-matrix/src/runners/contract/scenarios.test.ts (modified, +485/-5)
  • extensions/qa-matrix/src/substrate/e2ee-client.ts (modified, +2/-0)
  • src/logging/redact.test.ts (modified, +11/-0)
  • src/logging/redact.ts (modified, +4/-2)
RAW_BUFFERClick to expand / collapse

Bug type

Regression (worked before, now fails)

Beta release blocker

No

Summary

openclaw matrix verify device "Esxx xxxx xxxx xxxx" When using this command to recover the key, the following error always occurs: Verification failed: Matrix device is still not verified by its owner after applying the recovery key. Ensure cross-signing is available and the device is signed.

The matrix server is a locally deployed Synapse.

Steps to reproduce

  1. Log in to Matrix account A via Cinny
  2. Generate recovery key
  3. Configure OpenClaw's Matrix account A
  4. Execute the command openclaw matrix verify device "Esxx xxxx xxxx xxxx"
  5. The following error occurred: Verification failed: Matrix device is still not verified by its owner after applying the recovery key. Ensure cross-signing is available and the device is signed.

Expected behavior

Hopefully, the device can be certified normally.

Actual behavior

As described above

OpenClaw version

2026.4.21

Operating system

Ubuntu 24.04

Install method

docker

Model

minimax

Provider / routing chain

openclaw->cloudflare-ai-gateway->minimax

Additional provider/model setup details

No response

Logs, screenshots, and evidence

Impact and severity

No response

Additional information

No response

extent analysis

TL;DR

Ensure cross-signing is available and the device is signed to resolve the Verification failed error when using openclaw matrix verify device.

Guidance

  • Verify that cross-signing is enabled on the Matrix server (Synapse) to allow device verification.
  • Check the device's signing status to ensure it is properly signed by its owner.
  • Review the OpenClaw configuration for Matrix account A to ensure it is correctly set up for device verification.
  • Consider checking the Synapse server logs for any errors related to cross-signing or device verification.

Example

No specific code example is provided as the issue is related to configuration and setup rather than code.

Notes

The solution assumes that the issue is related to the configuration of cross-signing and device signing on the Matrix server and OpenClaw. If the issue persists, further investigation into the Synapse server configuration and OpenClaw setup may be necessary.

Recommendation

Apply workaround: Ensure cross-signing is available and the device is signed, as this is the most likely cause of the error and is explicitly mentioned in the error message.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

FAQ

Expected behavior

Hopefully, the device can be certified normally.

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

openclaw - ✅(Solved) Fix [Bug]: Matrix cannot recover the device using the recovery key. [1 pull requests, 2 comments, 2 participants]