Derivation Paths – Add Root Key

Polkadot Vault allows you to manage Derived Accounts. This allows you to manage several accounts on a network using the same seed. You can think of derived accounts as child accounts of the root account created using the original mnemonic seed phrase. There are different types of account derivation – hard or soft derivation.

When you add a network to an account on your Polkadot Vault device, you must provide your desired derivation path.

/ Soft Derivation

A soft derivation allows someone to potentially "go backwards" to figure out the initial account's private key if they know the derived account's private key. It is also possible to determine that different accounts that are generated from a seed are linked to that seed.

// Hard Derivation

A hard derivation path does not allow either of those things – even if you know a derived private key, it is not feasible to figure out the private key of the root address, and it is impossible to prove that the first account is linked with the second.

/// Password Derivation

In this type of derivation, if the mnemonic phrase would leak, accounts cannot be derived without the initial password. In fact, for soft- and hard-derived accounts, if someone knows the mnemonic phrase and the derivation path, they will have access to your account. For password-derived accounts, the password is applied on the derivation path. You can know the mnemonic phrase and the derivation path, but without the password, it is not possible to access the account. In mathematical terms, if we have a written derivation path and a password, we can calculate the real derivation path as f(written derivation path, password); where f is a function. We can then calculate the account key pair using f(seed, real derivation path).

Unlike hard and soft derivations that can be mixed, only a single password should be specified per derivation.

Root Key

The Root Key is basically the account generated by your seed without any derivation path associated with it. To add the Root Key you should:

The following steps need to be carried out on your Polkadot Vault Device.

1. Create or import an account into Polkadot Vault.

2. Select the Key Sets tab.

3. Select your desired account.

4. Select the plus + icon at the top right of the screen.

5. Select the Network field and then Select your desired network in the list.

6. In the Derivation Path field delete all data, including any / and then Select Done.

7. Select Create Derived Key.

8. Review the message about writing down your Derivation Path and then Select the I have written down my derivation path name field and then Select Done and complete the PIN / Biometry confirmation if prompted.