Backup & recovery

No. NT² is zero-knowledge by design—we never receive your password, threshold shares, or encryption keys. We cannot reset your password. If you created a threshold vault, you may set a new password with this device and your recovery kit (.nt2recovery file) via Reset password on the unlock screen. Otherwise, the only path is a .nt2backup backup exported while the vault was unlocked.

From the unlocked vault, export a .nt2backup file (Settings → backup). This encrypted bundle includes your profile, items, and attachments. Store copies in multiple safe places (encrypted drive, offline media). Test an import on another device periodically.

Export .nt2backup on the old device, transfer the file securely (USB, encrypted cloud storage you control), then import on the new device at open the vault app. You will need the same master password.

No. Sync replicates encrypted ciphertext across devices but does not replace offline backups. Keep regular .nt2backup exports as your disaster-recovery escape hatch.

Threshold vaults split your vault root across three factors: master password, this device, and a recovery kit (.nt2recovery file). Export from Settings → Recovery → Recovery kit when your vault is unlocked. Store it offline alongside your .nt2backup backup. You need two factors to unlock on a cold device—for example password + recovery kit, or this device + recovery kit.

Not for the recovery share itself. By design, .nt2recovery carries your Share_rec so a cold device can import it without a separate kit passphrase. Treat the file like a spare key: anyone who obtains it holds one unlock factor. Keep it on offline media you control, separate from your master password; do not email or chat it. Desktop Save As uses owner-only file permissions when the OS supports them; browser downloads cannot.

No. Password rotation invalidates your old recovery kit. Export a new .nt2recovery file when Settings prompts you after changing your password. Old recovery kits are rejected automatically.

Threshold vaults require a complete integrity envelope in vault metadata, authenticated with a key derived from your own vault key once your password or device unlocks it. This confirms your threshold and Key DID metadata weren't tampered with or partially restored on their own — it is not a full-profile anti-rollback guarantee, since a complete older copy of the whole vault database would carry its own matching envelope. If unlock or .nt2backup import reports an integrity check failure, the local copy may be incomplete, corrupted, or stripped. NT² does not silently repair missing integrity fields. Restore from a current .nt2backup backup or recovery kit exported after your last password change (from a device that still unlocked successfully).

On the unlock screen, choose Reset password (or tap Forgot password? after a wrong password). You need this device and your .nt2recovery recovery kit file. NT² cannot reset your password for you. Without both, the only path is a .nt2backup backup made while the vault was unlocked.

Settings → Security → Biometric unlock → Revoke biometric fast unlock on all devices (master password required). This bumps a portable revocation epoch so enrolled devices stop working until you re-enroll with your password. You can also check Also revoke biometric fast unlock on all devices when disabling cloud sync.

Recovery helps you regain access to your own vault if you lose a factor—master password, this device, or your .nt2recovery recovery kit (Settings → Recovery → Recovery kit). Convenience features such as biometric fast unlock, cloud sync, and replica enroll help you use the vault day to day or move to a new device; they are not executor access and do not share your master password. Inheritance (Settings → Sharing → Legacy emergency) lets you pre-encrypt selected vault items for a designated contact with a separate legacy passphrase and optional inactivity delay—NT² cannot decrypt the package or verify legal inheritance claims. Your executor needs the .nt2legacy file and legacy passphrase you provide out of band; they do not need your master password.

No. Sync and recovery kits are for the vault owner. An executor typically does not know your master password and cannot use your device factors. Use Legacy emergency to build an encrypted package of the items you choose to hand off—not your recovery kit, master password, or live vault credentials.

No. NT² is zero-knowledge: we cannot reset your master password, open your vault, or validate wills, death certificates, or executor appointments. Legacy emergency uses an inactivity timer based on your vault unlock activity, not proof of death. NT² provides technical packaging only—not legal estate planning.