Users also have the option to create a password for their old messages. In this case, the randomly generated key is stored in a backup key vault with a hardware security module (HSM). Once the messages are saved, users can enter their password into the Backup Key Vault to receive their encrypted key and unlock the old messages from storage. The key becomes inaccessible as soon as a certain number of unsuccessful password attempts have been made.
Source link