A backup you can actually open.

Vault has no account reset, server recovery key or emergency contact feature. Losing the passphrase and every usable unlocked copy can mean permanent loss of access.

Your recovery kit

1. Export an encrypted .kdbx backup. Record its date and where you put it.
2. Write your master passphrase on paper if that fits your threat model. Store it in a secure place, separately from an easily stolen device. Do not type it into a support form, this guide or an online document.
3. Record which devices hold the current copy and where older encrypted copies exist.
4. Test restoring a duplicate in a separate browser profile, then verify representative entries before deleting any older copy.

Use your browser’s Print command for this checklist. This page does not ask for, embed or automatically print your actual secrets.

After a passphrase change

Newly saved copies use the new passphrase. Older exports and backups still use the previous one. Changing it does not rewrite every external file or erase a recipient’s copy.

Before clearing storage

Clearing browser data may delete the only local encrypted vault. Private browsing may remove it when the session ends. Confirm a backup opens before uninstalling, resetting a device or switching profiles.