How it worksApp features

Encrypted backups and recovery

Export a portable encrypted .qvault backup and keep its recovery key separately. Restore your files without a Revault account.

Download RevaultSecurity model
Illustrative preview. Screens vary by platform.

A lost phone should not be your only copy of an important document. An encrypted backup carries your files outside the app, while your recovery key provides the separate secret needed to unlock them. You need both to recover a backed-up vault.

A portable encrypted copy

Export a .qvault backup from an unlocked vault and save it somewhere you control. The package contains an authenticated encrypted inventory and encrypted file segments. Download cloud-only files before preparing a complete native backup.

Recovery and backup do different jobs

A recovery key unlocks encrypted vault key material; it does not contain your files. A backup contains the encrypted files; it is not a substitute for keeping the recovery key. Store them separately and protect both from loss.

Validate a restore

Native imports authenticate the package before creating a new vault with fresh identifiers and encryption keys. Set its new device pattern and save the new recovery key. Check file counts and open important files before removing the source copy.

Keep three different things straight

Your local pattern unlocks this device. Your recovery phrase unlocks the vault’s encrypted key material. Your backup contains the encrypted files themselves. None of these substitutes for all the others. A recovery phrase cannot download a deleted file from nowhere, and an intact backup is unreadable without its matching recovery secret.

Make a backup you can reach after losing the phone

Save the .qvault package outside the device whose loss you are planning for: for example, in storage you control that remains accessible from another device. Keep the phrase separately so a single compromised folder does not contain both pieces. Before exporting, download any files that are not yet present locally and allow enough free space for preparing the package.

Test recovery before an emergency

Restore a backup while the source vault still exists. Confirm the expected number of files, open representative photos and PDFs, and check folders and names. A restored native vault gets fresh encryption keys and identifiers; save its newly issued recovery phrase. After changing a recovery phrase, make and label a fresh backup: older backup packages can still need the older secret.

Practical checklist

  • Verify the backup destination contains the completed package, not an interrupted export.
  • Label backup dates without placing the recovery phrase beside the file.
  • Repeat the backup after important imports or recovery-phrase changes, then test a restore periodically.

Frequently asked questions

Can I choose my own recovery phrase?

The apps offer a generated word-based phrase and a custom recovery-secret option. A custom secret needs enough unpredictability to resist guessing; a familiar quote or short personal phrase is a poor substitute for a generated secret. Keep the accepted phrase exactly as instructed by the app.

Does changing my recovery phrase revoke an old backup?

No. An older package contains earlier encrypted key material and can still open with its matching old recovery secret. Changing the current phrase does not retrieve or rewrite backup files stored elsewhere.

Can Revault repair a damaged backup or recover a lost phrase?

Authentication detects missing or altered encrypted data; it is not a repair service. Keep more than one independently stored, verified backup if the files matter, and retain the matching recovery material. Revault does not hold a reset key.

Keep exploring

Put this into practice in your vault

Choose the settings that fit your files, and keep a recovery plan before you rely on a single device.

Download Revault
App features