Encrypted sync

Your plan normally lives only in your browser. Encrypted sync keeps a copy on our servers as well, so you can clear your browser, replace your laptop or use your phone and still have your plan. It's free on every plan.

The copy is encrypted in your browser before it's uploaded, with a key only you can unlock. We store it, but we can't read it.

Turn it on

1. Open Preferences from the account menu (your name at the bottom of the sidebar).
2. Under Your data, next to Encrypted sync, choose Turn on sync.
3. Choose a sync passphrase: at least 10 characters. A few unrelated words work well. Don't reuse your sign-in password.
4. Save your recovery key. Copy it into a password manager or download it and keep the file somewhere safe. It's shown only once.
5. Tick I saved my recovery key and choose Turn on sync.

From then on, changes upload a few seconds after you make them. Preferences shows when this device last synced.

Use it on another device, or after clearing your browser

Sign in, and the overview shows Unlock your synced plan. Choose Unlock and enter your sync passphrase. If you forgot it, choose Forgot it? Use your recovery key. Capitals, spaces and dashes in the key don't matter.

Each device stays unlocked after that, until you choose Forget this device or delete the plan from that browser.

When two devices changed the plan

If you edit on two devices before they sync, for example one was offline, the newer plan is kept on both. The other version isn't thrown away: the device that had it shows A second copy was kept, with Download other copy. You can open that file with Restore from backup in Preferences if it was the one you wanted.

Change or turn it off

Use the menu next to Encrypted sync in Preferences:

• Change passphrase: needs your current passphrase or your recovery key. Your recovery key keeps working, and other devices stay unlocked.
• Forget this device: this browser stops syncing until you unlock it again. The plan stays here, and the synced copy stays on our servers.
• Turn off sync: deletes the encrypted copy from our servers for every device. The plan in this browser stays.

Deleting your account also deletes the encrypted copy.

What we can and can't see

We store the encrypted copy, when it was last changed and how big it is. We can't see what's in it: no amounts, names or dates. The key that opens it is created in your browser, and it only reaches our servers in encrypted form. Your passphrase and recovery key never do. See Your data and privacy and the privacy policy.