No ads or remote product analytics in the app.
Save all 24 generated words, then verify three requested words or the full key. The compact code represents the same secret; language changes never change it.
The words are generated for this vault, not chosen by you. Older compact recovery codes remain accepted. Losing both access and the correct recovery material can mean losing your files.
Choose a separate duress pattern or passphrase with clear warnings and confirmation. A non-destructive rehearsal verifies which space stays and explains what would be removed.
Duress removes other local vault material. It does not erase prior cloud backups, exported copies, or guarantee physical flash erasure.
Turn backup on when ready, review its status, and restore using your recovery material. Files are encrypted before CloudKit receives them.
Backup is opt-in. Apple Account availability, iCloud quota, and physical-device recovery testing still matter.
AES-256-GCM protects file content and metadata. Device-bound Keychain material and separate credential and recovery routes have distinct roles.
No independent audit or perfect-security guarantee is claimed. A compromised device and exposed recovery material remain risks.
Your private space, on iPhone and iPad.
