The codes below are this vault, encrypted. On their own they reveal nothing: opening them needs the passphrase or the key card, which is stored separately. To restore, scan each code with a phone camera, open back-stop, choose From paper and paste in the text, in any order. Without back-stop, recover.py from the same repository opens them using only Python.

This card opens your back-stop vault without the passphrase. Anyone who has this card and a copy of the vault - the file or the printed backup - can read everything in it, so keep this card away from both.

What this is. A private, offline store for account recovery codes - the one-time codes a service gives you for when you lose your authenticator - and anything else you need to survive losing your devices, such as break-glass passwords or a seed phrase. It is not a password manager, and nothing syncs.

Getting started. Create a vault with a passphrase of six or more unrelated words, then add each account and paste in its codes. Before you close the tab, keep a copy: export the file, print a backup, or both. Then print the key card and store it somewhere apart from everything else.

Where your data goes. Nowhere. This page cannot connect to the internet and never saves your codes in the browser. Everything lives in this tab, so anything you have not exported or printed is gone when you close it.

Your backups. The exported file is encrypted and opens in this tool with your passphrase. The printed backup is encrypted QR codes: scan them with a phone camera and paste the text into From paper. The plaintext sheet is every code in readable text. It needs nothing to use, which also means anyone who finds it has your codes, so it belongs in a safe. Keep each in a different place.

The key card. The key card opens your vault without the passphrase. That makes it your way back in if you forget the passphrase - and it means the card must be kept apart from your exported file and printed backup, because together they give anyone full access.

If you forget your passphrase. Open the vault with the key card, choose Change passphrase to set a new one, then export or print again. If a key card is lost or seen by someone else, use Change passphrase with Also replace the key, and print a new card. Neither can reach copies made earlier, so destroy those if they are why you are changing it.

Backups on several sheets. A large vault prints across more than one sheet, and every sheet is required: losing one loses the whole vault, not part of it. Keep the sheets together. For a copy somewhere else, print a second complete set.

Lock and close. Lock hides the vault but keeps it in this tab, so your passphrase or key card reopens it. It also locks itself after five minutes idle. Close discards it.

Without this page. If this page is ever unavailable, recover.py from the same repository opens an exported file or a scanned backup using only Python, with nothing to install.

Good to know. Codes and notes are blurred on screen: hold show to read one, and a field you are typing in stays readable. Print on paper with a local printer - printing to PDF saves your codes to disk, and network printers can keep a copy of the job. Only the three print buttons print anything; pressing Ctrl+P on its own prints only a short notice.

How it is protected. AES-256-GCM, with the key derived from your passphrase using PBKDF2-SHA256 at 600,000 rounds. That is the strongest the browser offers without extra software, but a short passphrase can still be broken with enough computing power, so length is what protects you. The full format is in the README.

Three controls in the top bar. Design sets the shape and backdrop, mode sets light or dark, and the accent can be any colour. These three choices are the only thing this page ever saves in your browser.