Support & FAQ

Use your recovery words. On the locked screen, choose "Use my recovery phrase instead", type the 12 words in order, and the vault opens. Then set a new master password in Settings. If you have neither the password nor the words, the vault cannot be opened — by anyone, including us. That is the honest cost of a vault nobody else can break into.

On your new device, install MyKey, then either open your vault file (if a copy is in your cloud) with your master password, or restore from a backup package — outside the app that takes your recovery words and the backup code from when you exported it. Then, in the desktop app, revoke the lost phone's device entry so new backup packages leave it out.

Yes, fully. There is no account, no sign-in, and no server. If you use a cloud folder, your cloud app moves the file when it has a connection; MyKey itself never connects anywhere.

No. Your vault is scrambled on your device with a key made from your master password, and that key never leaves your device. We have no copy of your password, your recovery words, or your vault. There is nothing for us to read, hand over, or leak.

MyKey has no server of its own — your own cloud carries the file. On a computer, point MyKey at a folder your cloud app already syncs. On Android there is no folder picker, so you save the vault file into your cloud app and open it from there on the other device; the app says this plainly in Settings. The file that travels is always the scrambled vault. If the vault changes on two devices at once, MyKey keeps both copies and tells you — it never silently overwrites.

A backup package is one encrypted file (ending in .mykeybak) holding your whole vault. On a device you set up, it opens with that device's own key. Anywhere else, opening it needs your recovery words and a backup code — 8 words shown once, at the moment you export, and never stored. Write the code down somewhere different from your recovery words. Words alone cannot open a new package, and the code alone cannot either: one lost paper is not the whole story. Older packages open with the words alone and are marked LEGACY so you know.

Export a CSV file from the browser (Chrome: Settings → Autofill → Password Manager → Settings → Export. Firefox: Settings → Privacy & Security → Saved Logins → the menu → Export Logins). In MyKey, choose import and pick the file. Chrome-family and Firefox files are recognised on their own; other files let you match the columns by hand. MyKey shows you what it found before importing, and asks about duplicates. When you finish, delete the CSV file — until it is inside MyKey, it is a readable list of your passwords.

The safe way is a backup package (above) — it stays scrambled. MyKey can also export a readable CSV file, for moving into another app, but only after a warning and a deliberate confirmation: anyone holding that file can read every password. Use it, then delete it.

They have a scrambled file they cannot read. Opening it needs your master password or your recovery words, and guessing is slowed down on purpose by the way the key is made. A long master password is what protects you here — that is why MyKey asks for at least 12 characters.

Use your master password — it always works. Then check your fingerprint is still set up on the phone. If you removed and re-added fingerprints, turn fingerprint unlock off in Settings and on again so it matches the phone.

Probably not. In the desktop app you can give a program you trust — like an AI assistant — its own limited key, so it can read only the entries you pick, never your sign-in codes, and never with your master password. You create it, you can revoke it any time, and every use is logged. Agents are off unless you create a key.

Yes — see Recover my licence for the exact steps.