Embedded subscriber identity module recovery when source device is non-functional

A method of wireless communication at a target user equipment (UE), comprising:

• transmitting, to a custodian UE, a request to provide a first token of a recovery token stored at the custodian UE, the recovery token associated with an embedded subscriber identity module (eSIM) of a source UE, the eSIM to be transferred to the target UE;
• receiving the first token of the recovery token from the custodian UE, the first token decrypted by the target UE using a private key released at least in part in response to entering a passcode of the source UE;
• obtaining, from a cloud service account associated with both the source UE and the custodian UE, a second token of the recovery token, the second token decrypted by the target UE using the private key;
• providing the recovery token, including the first token and the second token, to a remote server;
• and
• receiving, at the target UE, the eSIM to be transferred to the target UE.

A method of wireless communication at a source user equipment (UE), comprising:

• transmitting, to a custodian UE, a request for the custodian UE to perform as a custodian device of a recovery token for an embedded subscriber identity module (eSIM) of the source UE;
• receiving, from the custodian UE and responsive to the request, an acceptance of the custodian UE as the custodian device;
• obtaining the recovery token from a remote server, the recovery token comprising at least a first token and a second token;
• transmitting the first token of the recovery token to the custodian UE for storage;
• and
• transmitting the second token of the recovery token to a cloud service account for storage, the cloud service account being associated with both the source UE and the custodian UE.