A did:plc identity is a ledger of signed operations whose genesis hash is the DID; rotation keys above the signing key install a new one when it is lost; a central directory, not a blockchain, keeps the ledger; for three days a higher rotation key you kept yourself can undo a change. That is the recovery.

It is why losing a key or a domain does not mean losing the account.

did plc is a DID method made for atproto. Your identity is a ledger of signed changes, and the DID is a hash of the first one.

Rotation keys are the master keys, above the everyday signing key. Lose or leak the signing key, and a rotation key signs a change that installs a new one.

The ledger is kept by a central directory. Not a blockchain: a server that checks and stores signed operations.

Keep one rotation key yourself, on paper. For three days after any change, a higher rotation key can undo it. That is the recovery.

Why not just use a domain? Because you might lose it. did plc needs no domain to keep your identity.

Check yourself. What can a rotation key you kept on paper do in the three days after a bad change?