Encrypted iCloud backup and the recovery phrase
Cryptile copies every encrypted file to your private iCloud account, exactly as it sits on the phone. Apple stores only ciphertext, and each vault's 9-word recovery phrase is the only way to restore it.
Try Cryptile free: join the beta on TestFlight
What do I need to know?
- It is on by default. It runs after every change to a vault and each time you open one.
- Each vault has its own phrase. A decoy vault's phrase restores only the decoy.
- There is no reset. We run no server and hold no keys, so we cannot recover a lost phrase.
The backup is part of the free plan.
How do I save my recovery phrase?
- Create a vault by drawing a new pattern.
- Cryptile shows 9 words once. Write them on paper, in order.
- Tap I wrote it down.
- To see them again later, open the vault, tap the More button (three dots), then Recovery phrase.
Vaults made before the phrase was kept inside the vault cannot show it again.
How do I check the backup is running?
- Open a vault, tap More, then Settings.
- Under Backup, check that Encrypted iCloud backup is on.
- Read Last backup. Tap Back up now to run it at once.
If the phone is not signed in to iCloud, the status line says so.
How do I restore a vault on a new phone?
- Sign in to the same Apple Account and install Cryptile.
- On the lock screen, tap Restore a vault from iCloud backup.
- Tap Use the recovery phrase instead.
- Type the 9 words and tap Download backup and find vault.
- When it says Vault found, draw the pattern you want on this phone. It can be the old one or a new one.
Repeat for each vault you want back.
What does the backup protect against?
- A lost, broken or wiped phone. The vault comes back with its phrase.
- Apple, or a breach at Apple. iCloud holds ciphertext and no keys.
- Someone who copies your backup. It lacks the device secret your pattern is mixed with. Patterns cannot be guessed against it.
- A half-empty phone wiping the backup. Only items you delete on purpose are removed from iCloud.
What does the backup not protect against?
- Losing the phone and the phrase. The vault is gone. Nobody can reset it.
- Someone who finds your written phrase. The phrase alone opens that vault. Store it like a key.
- Changes made after the last backup. Check Last backup before you erase an old phone.
- Hiding that you use Cryptile. iCloud can see how large the backup is and when it changes.
Read the security page for the full limits.