When a vault is created you get a recovery key: a long code that opens the vault without the passphrase. It is shown once.

  1. Keep it with Print (a sheet with the key and a QR code), Save as text, or Copy.
  2. Tick I have stored this key somewhere safe and offline.
  3. Type the last 6 characters of the key to confirm you have it right, then continue.

Store it away from the computer: a printed sheet in a drawer or safe, or a USB stick kept offline. Anyone holding it can open the vault, so treat it like the passphrase.

The fingerprint printed with the key identifies which sheet belongs to this vault; it reveals nothing about the key itself. You can see the current fingerprint in Settings → Security.

To replace a key that may have been seen, see Issuing a new recovery key. If you have forgotten your passphrase, see If you forget your passphrase.