Password-Manager backup and recovery are designed around client-side encryption.

A backup file can be recovered with:

• the backup file
• the login password that was active when the backup was generated
• a compatible Password-Manager recovery page

No database connection is needed for recovery.

Log in and go to:

Settings -> Back Up

Click Start Backup.

If file attachments are enabled and you want to include them, check:

Include Files

Backup generation can take time. Do not close the browser tab until it finishes.

The downloaded file is usually named:

backup.txt

A backup requires the login password that was current when the backup was generated.

If you later change your login password, old backups still require the old login password.

After every login password change, generate a new backup.

Open the recovery page.

The recovery page is part of the frontend:

recovery.html

The recovery page works in the browser and does not require backend configuration.

Steps:

1. Open backup.txt in a plain text editor.
2. Find the backup version value, usually shown as "VERSION":"...".
3. Use a Password-Manager recovery page from the same version whenever possible.
4. Select backup.txt.
5. Enter the login password that was active when the backup was generated.
6. Start recovery.
7. Wait for the browser to finish decrypting.

If the browser asks whether to stop the page because it is taking too long, choose to wait.

Use the same Password-Manager version as the backup whenever possible.

If your current recovery page cannot unlock an old backup:

1. Find the version number inside backup.txt.
2. Download that Password-Manager release.
3. Open that release's frontend recovery page.
4. Recover the backup there.

You do not need to configure backend config.php just to use recovery.

After successful recovery, the recovery page can export:

• CSV
• RAW

CSV is useful for migrating to other password managers.

CSV export does not include:

• attached files
• password history information
• all internal metadata

Treat the CSV file as sensitive plaintext-equivalent data.

RAW export is intended for migration between Password-Manager instances.

RAW can contain the full clone data needed for import into another Password-Manager instance. If the backup included files, RAW export may include file data.

Treat RAW files as sensitive plaintext-equivalent data.

Recommended migration flow:

1. Generate backup.txt.
2. Open the recovery page.
3. Unlock the backup.
4. Export RAW.
5. Log in to the destination Password-Manager instance.
6. Go to Settings -> Import.
7. Import the RAW file.

Importing RAW adds entries to the destination account. For a clean clone, import into an empty account.

• Generate backups regularly.
• Store at least one backup offline.
• Store the login password or a recovery procedure securely.
• Delete temporary CSV and RAW files after migration.
• If compromise or data loss was caused by an attack, change the affected saved passwords after recovery.