How do I turn sync on?
Sync & devices · Help center · Current as of 2026-10-10
Short answer
Open Settings, then Sync, and either create an account with an email and password or sign in with Google; the lock screen also offers Apple. The vault already on the device is the one that gets published, encrypted, under that account, and automatic sync is on from that moment. Your vault passphrase is not part of signing in and is never sent.
What happens the moment you sign in
KeyNesta checks whether that account already holds a vault. If it does not, your wrapped encryption key is published and the vault's ciphertext is uploaded. If it already syncs a different vault, nothing is touched and you are told so — overwriting it would cut your other devices off from their codes. In that case lock, choose to add another vault, and sign in from there instead.
Two secrets, two jobs
- The account password (8 characters or more) identifies you to the sync service. It can be reset by email.
- The vault passphrase (12 characters or more) decrypts your codes. It never reaches the server and cannot be reset by anyone.
Signing in with Google or Apple replaces the first of those, never the second. What sync uploads covers what the server can and cannot see.
Automatic or on demand
Sync automatically is on by default: it runs shortly after you unlock and then about once a minute while the vault stays open, in the browser and on the phone apps alike. Turn the toggle off and nothing leaves until you press Sync now. Either way sync only runs while the vault is unlocked, because a locked vault holds no key to encrypt with.
Try KeyNesta free. The web app needs no sign-up.
Open the web app All platforms