Seed-level encryption for Vault and backup
Private Vault and encrypted backup can now use dedicated account keys derived locally from your 12-word phrase, without an extra recovery key.
Private Vault and encrypted backup now offer seed-level account encryption.
When you choose the 12-word phrase option, Buzzio restores the account master key locally and derives a dedicated wrapping key for that product. Vault and backup use separate domain labels, so they do not reuse each other's keys or messaging keys. The phrase is never uploaded.
Two choices remain
| Choice | What you keep |
|---|---|
| Seed-level account encryption | Your existing 12-word phrase; no extra Vault/backup key |
| Separate recovery key | A product-specific 64-character key you store offline |
Files are encrypted on your device before upload. Backup uses a random file key wrapped by your selected account/recovery key. Vault encrypts file bytes, thumbnails, filenames, captions, and other readable metadata.
Buzzio stores ciphertext and cannot reset a lost phrase or recovery key.
Learn more: Private Vault · Account and backup