The answer, step by step
- 01Secure the missing device
Use Apple's Find My and account-security controls to mark the device lost, review trusted devices, and update necessary credentials.
- 02Retrieve ciphertext again
Read the vault records under the correct Apple Account and CloudKit container.
- 03Enter the complete phrase
A word, order, or spelling error derives a different key; partial recovery should not be reported.
- 04Verify, do not assume
Authenticate every item's AES-GCM tag and attachment integrity, recording successes and failures.
How to check this claim
Run a disaster-recovery drill with a non-sensitive vault: isolate the original device, retrieve ciphertext on another device, enter the phrase, open text and attachments, and confirm the direct CloudKit read-back receipt.
See the full verification protocol →What this answer does not claim
Direct answers
Do I need the old iPhone?
Not necessarily. Complete synced ciphertext and the full phrase should allow a new device to restore decryption ability.
Does signing into my Apple Account reveal plaintext?
No. The account grants record access; the correct phrase grants application-level decryption.
Can the old phone still open the vault?
That depends on whether its local authorization remains valid. Use Apple account and device-management controls promptly.