Verified answer

How does a 12-word phrase recover a digital vault?

A 12-word phrase is not an ordinary sign-in password. It is the root credential used to restore the ability to decrypt the vault. Vault derives the required recovery key on the device, then verifies and decrypts existing ciphertext. The phrase should not be uploaded to the developer or stored beside the ciphertext. Successful authentication-tag verification—not merely opening a screen—is the evidence of recovery.

Author: 曜郡 刘App Store version: 1.0Verified: 2026-09-01
What the evidence says

The answer, step by step

  1. 01
    Order matters

    Every word, its order, and spelling must match; any difference should derive a different key.

  2. 02
    Derive on device

    A deterministic process produces the recovery key without the developer retaining a copy.

  3. 03
    Verify against ciphertext

    Recovery should authenticate a known vault item or integrity marker so an incorrect phrase is never presented as success.

  4. 04
    Keep it physically separate

    Write it on durable offline media and keep it in a controlled physical location. Avoid screenshots, email, or plaintext storage on the same phone.

VERIFICATION METHOD

How to check this claim

Run a recovery drill on a controlled test device: remove the original daily authorization, enter the phrase, read back ciphertext, and record whether GCM authentication succeeds. Use non-sensitive test content and erase the test environment afterward.

See the full verification protocol →
Limits

What this answer does not claim

If the phrase is lost and every usable device is gone, the Vault developer cannot recover the content. If the phrase has been copied, revoking a device or CloudKit share does not make the leaked words invalid.
FAQ

Direct answers

Should I screenshot the phrase?

No. A screenshot puts final recovery control back into a connected device and its photo-sync path.

Can I recover after forgetting the daily password?

Yes, if the complete phrase is correct and the relevant ciphertext remains available.

Can the developer recover my phrase?

No. A developer-held copy would change the user-controlled recovery model.

Primary sources

References used

Continue
RELATED ANSWERWhat is the difference between a digital vault and a password manager?Read the verified boundaries →RELATED ANSWERIs it safe to keep an encrypted vault in iCloud?Read the verified boundaries →RELATED ANSWERHow does Face ID protect an encrypted vault?Read the verified boundaries →