What is a Recovery Key?
TL;DR:
In the TaskNote ecosystem, the term "Recovery Key" refers to your Encryption Key when it is used to restore access to your account. Unlike other apps that give you a separate "backup code," we keep it simple: One Key rules them all. If you lose your password, this key is the only thing that can save your data.
🔄 The Same Key, Different Roles
It is easy to get confused by terminology, so let's simplify it. You have one file (or string of text) that encrypts your notes. Depending on when you use it, it has two names:
- Encryption Key: When you use it daily to unlock your notes on a new device.
- Recovery Key: When you forget your password and use this same key to regain access to your locked data.
We use the term "Recovery Key" to emphasize the importance of backing it up. It is your emergency break-glass kit.
🆘 How Recovery Works
Since we use Zero-Knowledge Architecture, we cannot reset your password for you. Here is the recovery workflow:
- The Crisis: You forget your Account Password. You can reset it via email to log in, but your notes will appear as locked "gibberish" because the new password cannot open them.
- The Rescue: You locate your backup copy of the Encryption Key.
- The Restoration: You upload this key into TaskNote. The app immediately recognizes it, decrypts your notes, and re-syncs everything.
If you did not save a copy of this key externally, "Recovery" is mathematically impossible.
📝 Best Practices for Storage
Since this Key is your only lifeline, you must store a copy outside of the app.
- USB Drive: Keep a digital copy (
my-key.txt) on a flash drive. - Cloud Storage: Save it in a different secure cloud (like Google Drive or Dropbox), but zip it with a password for extra safety.
- Printed Copy: If your key is a text string, print it out and store it with your physical documents.
The Golden Rule: Never keep the key only inside TaskNote. If you get locked out of TaskNote, you get locked out of the key too.
⚠️ The "Total Loss" Scenario
We value honesty over false hope.
If you lose your Account Password AND your Encryption/Recovery Key:
- Your account can be accessed (after password reset).
- But your data is gone forever.
- It will remain encrypted blobs on our servers until you delete them.
This confirms that only YOU ever had access.
❓ Frequently Asked Questions (FAQ)
Why don't you have a separate Recovery Code like Apple?
To reduce complexity and "attack surface." Managing two secrets (Encryption Key + Recovery Code) increases the chance of losing one. In TaskNote, if you have your Key, you have everything.
What if I change my password?
Changing your password affects how you log in, but it does not change your Encryption Key. Your saved backup file remains valid.
Can I regenerate my Recovery Key?
Yes. If you suspect your key was stolen, you can generate a new Encryption Key in settings. Warning: This will require re-encrypting all your data, and your old backup files will instantly become useless.