What is Vaultine's recovery phrase?

It's a sequence of 12 words, generated on your device the first time you set up a vault, that can restore access to your encrypted files if you ever forget your PIN or lose the device your vault was set up on. It's created using the same standard approach many crypto wallets use for seed phrases: a fixed word list and enough randomness that guessing it isn't realistic, while still being something a human can write down and read back.

What happens if I lose both my PIN and my recovery phrase?

Your files are unrecoverable, permanently. This is the direct, unavoidable trade-off of zero-knowledge design: because Vaultine never holds a copy of your key anywhere, there's no support ticket, password reset, or account-recovery flow that can get it back for you. The phrase exists specifically to be the one backup that doesn't depend on a server, so treating it casually removes the entire safety net.

Is a recovery phrase the same thing as a password?

No, and the difference matters. A password is something you choose, often reused, and typically recoverable through an email-based reset because a company holds a way back in. A recovery phrase is generated for you, used only once (during a restore), and works precisely because no company holds a copy of it. It's a backup key, not a login credential you'd type day-to-day.

Where should I store my recovery phrase?

Offline, and away from the device it protects. Writing it on paper and keeping it somewhere physically secure, like a locked drawer or a safe, is the standard approach. Avoid a screenshot, a notes app, cloud storage, or anything else connected to the internet: storing an offline-only recovery method online defeats the reason it's offline in the first place.

Can Vaultine see or store my recovery phrase?

No. It's generated locally on your device when you create your first vault and is never transmitted anywhere, including to Vaultine's own systems. That's consistent with the rest of the app's zero-knowledge design: nothing that could unlock your vault exists outside the device you set it up on and whatever offline copy of the phrase you keep yourself.

Do I need to write down a new recovery phrase for every vault I create?

No, one recovery phrase covers your entire Vaultine setup on that device, including multiple vaults. It's generated once, tied to the app's overall encryption setup rather than to an individual vault, so a single securely stored copy is enough.

How Vaultine's Recovery Phrase Works

Most apps have a "forgot password" link. Click it, get an email, set a new one, back in. It's such a normal part of using software that it barely registers as a design choice, until you use an app built specifically so that link can't exist. Vaultine's recovery phrase is what fills that gap, and understanding how it works also explains why the gap is there in the first place.

Why There's No Password Reset

Vaultine has no account, no email on file, and no server holding a copy of your encryption key (see Why a Vault App Without an Account Is Actually Safer). The key that unlocks your vault is derived from your own PIN or pattern, entirely on your device, and it's never transmitted anywhere. That's the whole point of a zero-knowledge design: nobody but you can decrypt your files, including Vaultine.

The unavoidable consequence is that a normal password reset simply isn't possible. Resetting a password requires someone, usually the company, to hold a way to verify your identity and issue a new credential. A zero-knowledge system has deliberately given that power up. Forget your PIN with no other backup, and there's genuinely no one who can get back in, not a support agent, not an engineer with database access, because there's no database holding what would be needed.

What the Recovery Phrase Actually Is

To close that gap without reintroducing a server-side backdoor, Vaultine generates a 12-word recovery phrase on your device the first time you set up a vault. It uses the same general approach as a cryptocurrency wallet seed phrase: a fixed dictionary of words, combined in a sequence long enough that guessing it isn't a realistic attack, but short enough that a person can actually write it down and read it back correctly.

The phrase is generated once, locally, and never leaves the device unless you copy it down yourself. Vaultine's systems never see it, store it, or have any way to reconstruct it. It functions as an offline-only backup key: something that can restore access precisely because it exists outside the reach of any server, breach, or legal request.

How It's Used

Day to day, the recovery phrase does nothing; you unlock your vault with your PIN or pattern like normal. It only comes into play if you're setting up Vaultine on a new device after losing the old one, or if you've forgotten your PIN entirely. Entering the correct 12 words in the correct order restores access to your encrypted vault. There's no partial credit for getting close: the phrase either reconstructs the correct key or it doesn't, the same way a cryptocurrency wallet seed phrase works.

Storing It Correctly (and the Mistakes That Undo It)

The recovery phrase only protects you if it's stored the way it's meant to be: offline, physically secured, and separate from the device it's a backup for. Common mistakes that quietly defeat the whole point:

A screenshot. It syncs to a photo library, possibly a cloud backup, putting an offline-only secret back online.
A notes app. Same problem, especially if the notes app itself syncs to a server.
Emailing it to yourself. This puts the one thing designed never to touch a server directly into an email provider's database.
Keeping it on the same device as the vault. If a stolen or lost device is the exact scenario the phrase is meant to protect against, storing it there defeats the purpose.

Paper, in a secure physical location, is unglamorous and correct. Some people split it across two locations for redundancy against fire or loss; that's a reasonable personal call, not something Vaultine can manage for you, since it never has visibility into where or how you've stored it.

Being Honest About the Trade-Off

This is worth saying plainly: a lost PIN and a lost recovery phrase together mean permanently lost files. There is no appeal process. That's not a shortcoming of Vaultine's support; it's the same architectural choice that keeps your vault safe from everyone else, applied consistently, including to the scenario where the person locked out is you. A system that could recover your files for you in that situation is a system where someone else also could, under the right pressure, and that's precisely the property zero-knowledge design exists to remove.

The Short Version

The recovery phrase is the one backup that works without reintroducing a server that could be breached or subpoenaed. Twelve words, generated on your device, never transmitted anywhere, and the only thing standing between a forgotten PIN and permanently lost files. Write it down once, store it somewhere offline and secure, and the trade-off that makes Vaultine genuinely zero-knowledge stops being a risk and just becomes a habit.

Set up your vault and your recovery phrase at vaultine.app — first 10 files free.