Verified answer

Should recovery keys be stored on an iPhone?

Separate two kinds of recovery key. Codes for other accounts or devices may be stored as encrypted Vault items. The 12-word phrase that restores Vault itself should not be screenshotted, photographed, emailed, or stored in plaintext on the same iPhone. Keeping ciphertext and its final key together weakens the isolation expected when a device is lost or an account is taken over.

Author: 曜郡 刘App Store version: 1.0Verified: 2026-09-01
What the evidence says

The answer, step by step

  1. 01
    Recovery codes for other services

    They can be normal sensitive items labeled with service, generation date, and update history.

  2. 02
    Vault's own phrase

    Keep it offline, separate, and controlled; do not store it back inside the same vault.

  3. 03
    Avoid one failure domain

    The phone, Apple Account, ciphertext, and final recovery credential should not all depend on one point of failure.

  4. 04
    Run periodic drills

    Verify a paper copy against a test environment before an actual disaster.

VERIFICATION METHOD

How to check this claim

Inventory what every recovery credential restores, where it is stored, and who can access it. Confirm that Vault's own phrase does not appear in Photos, Notes, email, cloud drives, or a Vault item.

See the full verification protocol →
Limits

What this answer does not claim

Paper can still be lost, damaged, or read by another person. Choose durable media, physical controls, and reasonable redundancy for the actual household threat model rather than copying it to many online locations.
FAQ

Direct answers

Can I store another wallet's recovery words in Vault?

Technically they can be sensitive text, but evaluate asset risk, export paths, and whether a dedicated hardware wallet is appropriate. Vault is not a hardware wallet.

Can I store Vault's phrase inside Vault?

No. It creates a circular recovery dependency and weakens offline recovery.

Is a paper backup safe?

It reduces network exposure but still requires fire, moisture, observation, and access controls.

Primary sources

References used

Continue