Documentation

Keep the key to your Inbox.

Encryption recovery and purchase restoration solve different problems.

Create a recovery package

On your primary iPhone, export the recovery package after local identity confirmation. It contains encrypted root and phone receiver material, never Source private keys or a plaintext message database. Save the separate random recovery code securely; the encrypted file does not contain that code.

Move to a new iPhone

Import the package and enter the recovery code. The client verifies it without changing the working configuration on failure. New root and receiver keys must be saved locally before committing the migration. After successful rotation, old phone and browser sessions stop working and pending requests from before recovery are cancelled. Export an updated recovery package.

What can be recovered

Only still-retained ciphertext addressed to the recovered phone keys can be read. Already-expired history cannot be promised. An old backup cannot take over an Inbox whose root has already rotated. Sources keep their own keys; reconnect when migration or authorization requires it.

Restore purchases

Apple can restore your Plus entitlement without restoring any message keys. If all keys and backups are lost, support cannot decrypt your Inbox. Starting fresh requires an explicit service switch if the entitlement has an active Inbox; it does not silently reactivate or decrypt the old one.