Vault Backup Security Rules
- Encrypt backup files with a strong master passphrase using PBKDF2/AES-256.
- Never save unencrypted secret keys in cloud text files or unencrypted emails.
- Keep a secondary encrypted backup copy on an offline flash drive.
Password breaches occur daily across the web. Enforcing TOTP authentication through Web Authenticator ensures that leaked passwords cannot give attackers entry into your primary accounts.