Your encryption key

When you enable sync, sensitive fields are encrypted on your device before upload. How you unlock that data on a new device depends on the mode shown in Settings → Sync.

Sign-in recovery (default)

By default you use sign-in recovery. Data is still encrypted before it leaves each device. On a new device, sign in to unlock sync — you do not need a separate recovery code for day-to-day setup.

Target details show Sign-in recovery when this mode is active.

End-to-end encryption (optional)

Enable end-to-end encryption under Settings → Sync → Encryption key options if you want a stricter model: only a device with your recovery code (the encryption key) can unlock synced data. Lose that code and every unlocked device, and the synced copy is gone for good — even Vetroscope cannot help.

Caution

When end-to-end encryption is on, the in-app warning means exactly what it says: “If you lose it and all your devices, your cloud data cannot be recovered.” Store the encryption key in a password manager the moment you see it.

You can switch back with Use sign-in recovery instead….

What encryption protects

App names, window titles, breakdown and project names, event labels, notes, and similar content are encrypted on your device before upload. The server — Vetroscope Cloud or your own Home Sync box — stores ciphertext it cannot read in end-to-end mode, and still receives only encrypted sensitive fields under sign-in recovery. Your account password is separate and can be reset.

Using the encryption key on a new device (E2EE)

If end-to-end encryption is on and this device does not hold the key yet, sign in and you’ll see that an encryption key is required to sync. Enter the key from a device that already syncs (or from your password manager). Until you do, sync waits.

Viewing, verifying, regenerating (E2EE)

In Settings → Sync, with end-to-end encryption on:

• View the encryption key again (to store it properly).
• Verify encryption key — check a key you wrote down is the right one.
• Regenerating creates a fresh key and re-encrypts going forward — use this if you believe the key leaked.

If you’ve lost the encryption key (E2EE)

• Still signed in on at least one device? That device holds the key — open Settings → Sync and save it now.
• No devices left? The synced copy is unrecoverable. Your local data on any machine is unaffected — wipe the cloud or Home Sync data for that target, set up sync again, and push from the device that has your history.

One encryption key covers all your sync targets — Cloud and Home Sync use the same one when E2EE is enabled.