Security tab

Vavus encrypts your keyboard history with a key generated on your device. The Security tab is where you decide who can recover that key. The default — "standard recovery" — lets Vavus help reset your password if you forget it. The opt-in — "zero-knowledge mode" — disables that help in exchange for stronger privacy, and binds your data to a 12-word recovery phrase only you hold.

1. 1
   Account encryption status card

   Tells you which mode you're in: "Standard recovery" (default) or "Zero-knowledge active". Read the description carefully — the two modes have very different lost-password consequences.

2. 2
   Confirm password

   Every change on this page requires your account password. Type it in to enable any of the buttons below.

3. 3
   Generate recovery phrase (standard → zero-knowledge)

   Creates a 12-word phrase derived locally on your device. The phrase wraps your encryption key. Vavus never sees the phrase or the unwrapped key. Save it somewhere safe before continuing.

4. 4
   Recovery phrase display

   The 12 words appear once. Copy them to a password manager, write them down, or screenshot them — then confirm you've saved them.

5. 5
   Confirm and enable zero-knowledge

   Switches your account into zero-knowledge mode permanently. From this point on, your password or the recovery phrase is the only way back into your encrypted data.

6. 6
   Use standard recovery (zero-knowledge → standard)

   Reverts your account to standard recovery. Vavus holds an unreadable wrap of your key again so it can help reset your password. Requires your current password.