Is my data safe?
Yes. MyLifePapers uses end-to-end encryption with a key derived from your passphrase. In plain English: your data is scrambled on your device before it ever touches any sync service, and the key to unscramble it is only stored in your head (and the recovery code you wrote down).
Technical details:
- Passphrase → key: Argon2id (memory-hard, resistant to brute force).
- Data encryption: XSalsa20-Poly1305 (libsodium authenticated encryption).
- Cross-member sharing: libsodium sealed boxes (public-key crypto).
We designed the system so that even if our servers were fully compromised, your data would remain unreadable.
Where is my data physically stored?
A copy lives on every device you use MyLifePapers on. Another copy lives with whichever sync provider you picked (Google Drive, iCloud, Dropbox, or MyLifePapers Cloud). Files are encrypted on disk in all locations. Even someone with full access to your Google Drive account cannot read your records without your passphrase.
Backup and export
Your data is backed up wherever you sync. Because MyLifePapers is local-first, a full copy lives on every device you have set up, and if you use a sync target (MyLifePapers Cloud, or your own Google Drive, Dropbox, OneDrive, or iCloud), an encrypted copy lives there too. Losing one device does not lose your data.
To move to a new device, install MyLifePapers, choose Join Household or Restore during setup, connect the same sync target, and enter your passphrase (or recovery code). Your encrypted records download and decrypt on the new device.
What if I forget my passphrase?
If you wrote down your recovery code during setup, use it to unlock. Recovery codes work on any device where you restore your records.
If you lost both the passphrase and the recovery code, there's no way to recover the data. We designed the system to make that impossible, meaning no one (including us) can read your data, ever. The trade-off is that we can't reset it for you.
Tip: Share your recovery code with someone you trust (a spouse, an attorney, a safe deposit box) or store it in a password manager. The recovery code alone is useless without access to your encrypted data, but together they unlock everything.