Portable encrypted backup · iPhone and Mac

Keep a recovery copy you control.

Create a snapshot, save it outside the source device, check the saved copy and understand how fresh-vault restore works.

Vault Backup controls on iPhone
The backup screen separates preparing a new snapshot from checking a file already saved elsewhere.

A saved encrypted backup and its separate recovery code can recover the files in that snapshot if the source device or key is lost. There is no automatic cloud backup or account reset.

Backup type
Manual encrypted snapshot
Later changes
Require a new snapshot
Recovery code
Unique to each backup
Received files
Excluded

Before you start

Choose somewhere outside the source device for the encrypted backup, and a separate safe place for its code. Anyone with both can recover the saved files. Keep important originals until you have checked the destination copy. Finish other file operations and make sure the source and destination have enough free space.

Separate the two pieces. A backup stored only on a lost device is not a recovery copy. A recovery code copied to the clipboard has not been stored safely.

Create and save an encrypted backup

  1. Open Encrypted backup

    On iPhone, go to Settings → Encrypted backup. On Mac, go to About your vault → Encrypted backup….

  2. Prepare the backup

    Choose Prepare an encrypted backup. Vault displays a newly generated recovery code.

  3. Store the complete code separately

    Save the full code somewhere separate from the future .vaultbackup file. Then turn on I saved this code separately from my backup and enter its last six characters in the confirmation field.

  4. Create and verify the snapshot

    Choose 2. Create and verify backup. Keep Vault open while it checks every saved file. Wait for Backup verified.

  5. Save the verified file

    Choose 3. Save encrypted backup… and select a destination that remains available if the source device is lost. Creating the temporary snapshot is not the same as completing this save.

iPhone Backup screen with preparation and saved-backup verification controls
iPhone entry point for preparing a backup or selecting a saved copy to check.
Mac Encrypted backup sheet with preparation and verification controls
Mac backup controls. These screenshots show entry states, not a completed restore.

Check the file you actually saved

  1. Choose the destination copy

    Under Check a saved backup, choose Choose a backup… and select the file from its saved destination.

  2. Enter its complete recovery code

    Use the full code generated for this exact snapshot, then choose Verify backup.

  3. Read the verification result

    Look for Every saved file verified, together with the file count, folder count, size and snapshot date.

Verification reads every saved file without changing the current vault. It helps catch an incomplete destination copy or a code stored for a different snapshot.

Restore into a fresh vault

Restore is available before setting up a vault. It does not merge into or replace an existing vault, including an empty or damaged one.

  1. Choose Restore an encrypted backup

    Use the welcome screen on a fresh installation or another device.

  2. Select the backup and enter its full code

    Choose the retained .vaultbackup file, enter the matching recovery code and select Verify and restore.

  3. Let Vault verify and re-encrypt

    The snapshot is checked and files are re-encrypted under the destination device’s local key before the new vault is installed.

  4. Check the recovered library

    After Restored into a new device-protected vault, open sample files and decide where to keep the next recovery pair.

Do not delete your only vault merely to test restore. Use a fresh installation or another device and keep the backup and code throughout the test.

When backup or restore fails

  • Enter the whole recovery code, not only the six-character creation confirmation.
  • Verify that the code belongs to the selected snapshot.
  • An existing vault cannot be replaced; preserve it and use the fresh-vault route.
  • Check free storage and keep provider files downloaded and accessible.
  • Vault cannot reset a lost recovery code.
  • Received shares are intentionally absent after restore; reopen the original package using its sender’s code.