Vault sync
Sync encrypted vaults across your devices — end-to-end encrypted, per vault.
Vault sync
Sync a vault to your other computers, so the hosts, identities and groups you add on one machine appear on the next. Sync is end-to-end encrypted: the vault is encrypted on your device before anything is uploaded, and the server only ever stores ciphertext. Not even a Kubexer admin can read it.
Turn sync on or off
- Open the vault, then Vault settings in its sidebar.
- Switch Cloud sync on.
Sync is per vault, so you can sync a work vault and keep a personal one on a single machine.
On your other computer, sign in with the same account. Synced vaults appear on Home. Unlock each one with the same vault password (or its recovery key) — the password never leaves your devices, so it isn't synced.
See sync status
- Vault settings → Sync status shows Pending upload when local changes haven't been sent yet, and Sync now to push them immediately.
- On Home, the Sync button next to Vaults runs a sync pass for every vault, and its tooltip shows when the last one ran.
- If a sync pass fails, Home shows the error, even while vaults are locked.
Turning sync off
Turning Cloud sync off deletes the vault's cloud copy. The vault stays on this device and keeps working exactly as before, but it is removed from your other devices the next time they sync. Unsynced changes made on those devices are lost.
Turning sync back on re-uploads this device's copy, which restores it to your other devices.
Plans
Vault sync is a Pro feature. Without it, vaults keep working locally, and anything already in the cloud can still be removed.