Is my data safe?
Yes. MyLifePapers uses end-to-end encryption with a key derived from your passphrase. In plain English: your data is scrambled on your device before it ever touches any sync service, and the key to unscramble it is only stored in your head (and the recovery code you wrote down).
Technical details:
- Passphrase → key: Argon2id (memory-hard, resistant to brute force).
- Data encryption: AES-256-GCM.
- Cross-member sharing: libsodium sealed boxes (public-key crypto).
We designed the system so that even if our servers were fully compromised, your data would remain unreadable.
Where is my data physically stored?
A copy lives on every device you use MyLifePapers on. Another copy lives with whichever sync provider you picked (Google Drive, iCloud, Dropbox, or MyLifePapers Cloud). Files are encrypted on disk in all locations — even someone with full access to your Google Drive account cannot read the vault without your passphrase.
Backup and export
You can export an encrypted .mlp backup file at any time from Settings → Sync & Backup → Export Backup. The exported file is still encrypted with your passphrase — you can store it in a safe deposit box, on a thumb drive, or anywhere else.
To restore from a backup on a new device: during onboarding, pick Restore from backup and open the .mlp file. You'll need your passphrase to decrypt it.
What if I forget my passphrase?
If you wrote down your recovery code during setup, use it to unlock. Recovery codes work on any device where you restore the vault.
If you lost both the passphrase and the recovery code, there's no way to recover the data. We designed the system to make that impossible — meaning no one (including us) can read your data, ever. The trade-off is that we can't reset it for you.
Tip: Share your recovery code with someone you trust (a spouse, an attorney, a safe deposit box) or store it in a password manager. The recovery code alone is useless without access to your vault, but together they unlock everything.