Privacy & security

Why the vault has its own passphrase

Signing in proves who you are to the service. Unlocking the vault is a different operation on your device. Your vault passphrase derives a key locally; the service receives an encrypted key envelope and encrypted file contents. The server can still see your account email, file sizes and upload times. A separate recovery key gives you another way to unlock. Neither key is held by support. Keep an independent backup and protect the device on which you view your records.