Skip to content
PasserJack

Recovery and your data

Last updated 4 November 2026

Choose the right recovery path for an archived item, an earlier edit, lost Vault access or a capture that has not finished sending.

Use Archive for reversible cleanup

Open an item's menu and choose Archive to remove it from the active view while keeping it in your account. To bring it back, switch to archived items in the same Board or Vault and choose Unarchive. Archiving does not extend an item's self-destruct deadline.

For several items, choose Select items, check the items you want, then Archive selected. Select up to 50 loaded items covers only the items currently loaded, not every result in your account. Read the result message before leaving: a batch can finish only partly.

Use Undo archive when it is offered. If an item changed since the archive, the undo can refuse it so it does not overwrite a newer action. Review it in archived items instead; Restore selected brings selected archived items back to the active view.

Edit history does not recover deleted items

History on an existing Board item lets you inspect retained earlier content and choose Restore this version. That writes the selected version back onto the current card. It is different from Unarchive, which keeps the content as it is and returns the card to the active view.

The history drawer shows the newest 20 retained changes within 30 days. Unarchive a card before restoring a version. Vault content cannot be restored through this history drawer, and moving an item into the Vault removes its previous plaintext history.

Delete permanently removes the item from your account and removes its associated history. There is no trash view or undo for Delete. Choose Archive when you only want the item out of the way, and keep an independent copy of anything you cannot afford to lose.

If you cannot sign in

Sign in with the email address associated with your PasserJack content, with Google or with a sign-in link emailed to that address. If you have more than one Google account, check the selected email address. An emailed link works once and expires after 10 minutes; if one does not arrive, check your spam folder and resend it after a minute. If you used Sign in with Apple and chose to hide your email, that account uses Apple's relay address and is separate from an account under your real address. Access to your sign-in and access to your Vault are separate: signing in again does not restore a lost vault key.

A lost passkey does not lock you out. Sign in with Google, Apple or an emailed link, then remove the lost passkey in Settings > Sign-in.

If sign-in still fails, contact PasserJack support with the account email, the error shown and when it occurred. Do not send a password, access token or recovery code.

Open your Vault on a replacement device

Sign in and open the Vault. If another trusted device can still open it, request approval and check the displayed verification codes on both devices before confirming the match. If they differ, reject the request and use your recovery code instead.

You can also choose Use recovery code and enter your saved code on the device you want to authorize. Enter it only in PasserJack's recovery screen. Support does not need it.

If you forgot a device's local vault passphrase, another trusted device or your recovery code can restore access. The local passphrase cannot be reset to recover its old key directly.

Keep a recovery code you can reach

Vault setup shows your recovery code once and asks you to copy or download it before finishing. Store that copy securely outside the Vault, such as in a password manager or a secure offline record. A code stored only inside the Vault cannot help when you are locked out.

You cannot display the existing code again. From a device that can open your Vault, use the Vault management controls to generate a replacement. The old code stops working immediately, so save the new one before closing the screen.

Before clearing browser storage, replacing a device or removing its trusted access, confirm that another device or your recovery code works. Clearing site data can remove that browser's key and unsent offline captures.

Before clearing browser storage or leaving an unsent draft

Do not clear site data, uninstall the app or reset your Vault as a first troubleshooting step. Browser storage can hold that device's Vault access and captures that have not reached your account. Server-side support tools cannot retrieve a capture that exists only on your device.

A pending local capture is not a confirmed upload. Return to the account that made it, reconnect and review its status. Open the Vault if sending needs its keys. If a capture is blocked by storage limits, an expired deadline or changed access, resolve that message before assuming it was saved. Confirm important items are available on another signed-in device before removing the local copy.

A draft without a successful save or queue confirmation may exist only in the current tab. Keep the tab open and save a separate copy you control before reloading or closing it. An encrypted pending capture still needs usable keys; resetting the Vault does not recover ciphertext made under its old keys.

Before removing browser data or trusted access, confirm that another trusted device or your recovery code can open the Vault. Signing in again restores access to saved account records, but does not recreate a browser key or an unsent capture that was erased locally.

If every device and recovery code is lost

Existing vault content cannot be recovered. Support cannot bypass the encryption. A reset creates a new vault and permanently destroys the old vault's content and keys; it does not recover them.

Request a reset from the locked Vault's reset controls. There is a seven-day waiting period, and the service sends notices to your email and registered devices. A device that can open the Vault can cancel the request. If you regain access during the waiting period, cancel the reset instead of proceeding.

When the waiting period has finished, setting up the replacement Vault executes the reset. Board items remain. Encrypted sharing permissions between your account and other accounts end in both directions because they depend on the replaced keys. This does not delete other people's original content or copies they already saved.

Save an independent copy

Keep separate copies of important content. Copy text from an opened item and download its attachments using their save or download controls. For Vault content, open it on a trusted device first so the saved copy can be decrypted locally. Store decrypted downloads securely.

An ordinary API or storage download of a Vault file can contain encrypted bytes rather than a readable original. Use the opened item's save controls on your trusted device, then check that the separate copy opens. Saved downloads stay outside PasserJack; archiving, deleting or revoking a share does not remove them.

For a copy of your whole account, open Settings, then Account, and press Export my data. The archive is ready within a few minutes to a few hours, depending on how much you store, and you can download it for seven days. You can ask for one export each day. The archive holds your items, their attachments and your account records; Vault entries stay encrypted. An agent key, a connected app or a paired phone cannot ask for it.

To put an archive back, open Settings, then Account, and choose Restore from an export. An item that is already in your account is not restored twice, and share links, shares, keys and devices are not restored. Vault entries restore only while your Vault keys are the ones the archive was made with. Support cannot decrypt Vault content for you: an encrypted export opens only with your recovery code on a trusted device. Do not send recovery codes, private keys, session cookies or access tokens to support.

Permanent deletion and account closure

Use an item's Delete action only when you intend permanent removal. Expiry also removes access after the selected deadline, with storage cleanup following later. Neither edit history nor Archive is a deleted-items recovery service.

Deleting an item removes its active data and initiates cleanup of attachments, derivatives and retained revisions. Cleanup may take longer after a storage error. Downloaded copies, recipients' copies and backup retention are separate from removing an item from the live account.

To delete your account, open Settings, then Account, and press Delete my account. Type the words it asks for and sign in again if it asks. The deletion happens seven days later. Until then, press Keep my account in Settings, or open the link in the email we send, and the account stays. Export your data first if you want a copy: press Export my data on the same page, wait for the email, and download the archive. An agent key, a connected app or a paired phone can do neither.

Cancel renewal through the billing portal if you want to stop future subscription charges. Cancellation does not delete content, and deleting an item does not cancel billing. When you delete your account, the subscription is set to end at its paid period, and the erasure waits for that period to end.

Need help? Contact PasserJack.