Why backup matters

If you lose or reset your phone without a backup, you lose access to all 2FA codes. Without codes, you can't log in to accounts that use two-factor authentication. A backup takes less than a minute.

No backup = locked accounts if you lose your phone. Many services require lengthy identity verification to recover access without 2FA.

Encrypted backup (.geslar)

The recommended format. All secret keys are protected with AES-256-GCM encryption.

Open Ključar → Settings → "Backup".
Tap "Export encrypted backup".
Enter a backup password (can be the same as or different from your master password).
Choose where to save the .geslar file.
Store the file in a safe location (USB drive, computer, encrypted cloud).

The backup password is separate from the master password. Even if someone gets access to the file, they cannot read your keys without the password.

Unencrypted backup (JSON)

For transferring to another authenticator or as a last-resort recovery option.

Open Ključar → Settings → "Backup".
Tap "Export unencrypted (JSON)".
Confirm that you understand the risk — the file contains secret keys in readable form.
Save the file.

Unencrypted backups are sensitive. Anyone with access to the file can copy your TOTP keys. Use only temporarily and delete after import.

Restoring from backup

Install Ključar on the new device (installation guide).
Set up a new master password.
Go to "+" → "Import" → "Geslar Ključar".
Select the .geslar file.
Enter the backup password (the one you set when exporting).
Review codes and tap "Save all".

Backup recommendations

Frequency

Create a backup every time you add a new code. It takes 30 seconds and can prevent hours of trouble.

Multiple copies

Store backups in two locations: USB at home and one at work or in a safe. One device = one point of failure.

Test restores

At least once, test restoring on another device. A backup you can't restore is not a backup.

Recovery codes

Besides Ključar backups, also save the recovery codes that services provide when you enable 2FA. That's an extra safety net.

Lost phone, no backup

Try accessing accounts with recovery codes (if you saved them).
Contact customer support for each service and request a 2FA reset.
Most services require identity verification (ID, email confirmation).
After recovering access, enable 2FA again and this time, make a backup.

Ključar Backup