Set up end-to-end encryption

Before enrollment

Sign in, use a stable connection, and allow time for existing server history. Decide where you will store the generated recovery code separately from the device. A recovery code protects access; it is not a mood-data export. A password-backed Vibbrancy account is currently required to enroll in end-to-end encryption. If your account is passwordless and uses Google or Apple sign-in, you cannot enroll yet.

Enable encryption

1. Open Settings → Privacy & Security → End-to-End Encryption.
2. Start enrollment and follow the proof step offered for the account.
3. When Vibbrancy generates a recovery code, save it in a private password manager or another secure place only you control.
4. Confirm that you saved it. Never paste it into email, chat, a support form, or diagnostics.
5. Keep the app connected while it handles existing server history and other supported categories.
6. Return to the encryption section and confirm Encryption Active.

Expected result

New eligible synced mood entries are encrypted on-device before sync. The management section provides lock, recovery-code, key-rotation, auto-lock, device, and older-entry actions as applicable. App Lock and its PIN remain separate local-interface protection.

Older data or retry

1. If enrollment succeeds but reports older data remaining, do not disable encryption.
2. Reconnect and choose Encrypt older entries.
3. Keep the app open and retry failed category work later; an unreachable older category does not mean new data enrollment failed.
4. Do not rotate keys, revoke devices, or clear local identity merely to force a retry.