[enimodas]

It can be stored on the server, and encrypted by the users' private key. Like a message to himself.

[hardwarescope]

That doesn't solve the case for when you get a new device or reinstall the app. Any keys you had are lost.