Guides

Back up and restore your vault

Your vault exists only in your browser. An encrypted backup is how you recover from a lost device or cleared browser data, and how you move to another browser.

Backups stay encrypted with your passphrase

Why backups matter

  • Clearing browser data deletes the vault. So does resetting your device, uninstalling the browser or some "clean up" tools.
  • Private and incognito windows forget everything when they close.
  • Each browser has its own vault. Chrome and Firefox on the same computer don't share one.
  • There's no copy anywhere else. 2FA Keyring has no server or account that could restore your keys.

Save a backup

  1. Unlock your vault and choose Backup.
  2. Choose Download backup file. The file is named like keyring-backup-2026-10-16.json. If downloads are blocked, choose Copy backup text and paste it into a file yourself.
  3. Store it somewhere that survives losing this device: a USB drive, an encrypted drive or a personal cloud folder. Keeping two copies in different places is even better.

The status at the top of the Backups window shows when you last backed up and how many changes you've made since. The app also reminds you after you add, edit or remove keys, or change your passphrase.

Check a backup

Checking proves a backup will work before you need it. It never changes your vault.

  1. In Backup, under Check a backup, choose the backup file (or paste its text).
  2. Enter the passphrase you had when you made it, and choose Check backup.
  3. The app confirms it opens and how many keys it contains. It also lists keys that are in your vault but missing from the backup, and keys in the backup that aren't in your vault.

Restore on a new device or browser

  1. Open 2fa-keyring.com/app in the new browser.
  2. On the Create your vault screen, choose Restore from an encrypted backup.
  3. Choose the backup file, enter its passphrase and choose Restore vault. The restored vault keeps the same passphrase.

Merge into an existing vault

If the browser already has a vault, unlock it, choose Backup, and use Merge a backup into this vault. Keys from the backup that aren't already in the vault are added; nothing is removed or replaced.

Passphrases and backups

  • A backup opens with the passphrase that was in use when it was made.
  • After you change your passphrase, older backups still need the old one. Make a new backup and delete the old files once you've checked the new one.
  • A forgotten passphrase can't be recovered, so a backup won't help in that case. That's what recovery codes are for.

Keep your recovery codes

When you turn on two-factor at a service, it usually offers recovery or backup codes. They let you sign in if you lose your authenticator. Keep them separate from 2FA Keyring, for example printed or in a password manager, so a single loss can't lock you out of everything.