Encryption FAQ

Your watches (titles, notes, scores), taste summaries, recommendations and contacts. When encryption is on, the database only stores ciphertext — the individual fields are emptied.

Use your recovery key (the one you downloaded when enabling encryption) to unlock or disable encryption. If you lose both your passphrase and your recovery key, your data is permanently unrecoverable — there is no server-side reset.

Yes. On a new device, you'll be asked for your passphrase on first sign-in. The encrypted data stays in the cloud — only the key lives on your device.

Your key is removed from local storage, and you'll see the passphrase screen on your next visit. Enter your passphrase or recovery key to continue. Your encrypted data in the database is unaffected.

Yes. When you use taste profiling or recommendations, your data is decrypted in server memory for AI processing, then the results are encrypted before storage. The server never stores your key or your plaintext data.

Your passphrase derives a wrapping key (PBKDF2, 600,000 iterations) that encrypts your master key. The master key encrypts your data with AES-256-GCM. Neither your passphrase nor your master key is stored on the server — only the wrapped (encrypted) master key is kept in your profile.

Not yet. To change it, disable encryption (which decrypts all your data), then enable it again with a new passphrase. This generates a new recovery key.

The recovery key is your master encryption key in raw form. It's shown once when you enable encryption and can be downloaded as a text file. It unlocks your data even if you forget your passphrase. Keep it somewhere safe and offline.