Use cases / Personal backups
Master passwords, TOTP secrets, sensitive files — encrypted using a passphrase only you know, printed on paper or saved as a file.
The problem
Password manager master password is the single key to your digital life. Losing it means losing access to everything. Post-it notes and shared documents are not the answer.
Authenticator apps and hardware keys like YubiKey do not always allow backing up TOTP secrets. Losing access to your authenticator means getting locked out of your accounts.
Storing two-factor recovery codes on your everyday computer defeats purpose of using authenticator app on another device or YubiKey.
Sharing sensitive documents by email or cloud storage exposes them to interception. Most cloud providers can access your files as they are not end-to-end encrypted.
The solution
Encrypt any secret using passphrase in an encrypted QR code backup called a block — printed on paper or saved as a file replacing the post-it note.
Learn more →Encrypt files and folders into a single encrypted file — send archive through one channel and passphrase through another.
Learn more →Enter your secrets, choose a strong passphrase and create a block. Print block on paper or save as PDF — only you can decrypt secrets.
Store block in home safe, filing cabinet or secure storage. Passphrase can live in your password manager.
For a second factor, enable YubiKey protection — without it, passphrase alone cannot unlock block.
To restore, scan block, enter passphrase (and plug in provisioned YubiKey if YubiKey protection is enabled) and view secrets.
Drag and drop files or folders into Superbacked, choose a strong passphrase and create a standalone archive — a single encrypted file you can store or share anywhere.
Send archive through one channel and passphrase through another — for example, archive via Proton Drive and passphrase via Signal. If one channel is compromised, security model holds up.
For a second factor, enable YubiKey protection — without it, passphrase alone cannot unlock archive.
To restore, drag and drop archive into Superbacked, enter passphrase (and plug in provisioned YubiKey if YubiKey protection is enabled) and choose where to restore files or folders — same experience on macOS and Linux, in app or from terminal, no account required.
No solution protects against everything — being honest about that is part of earning your trust.
Superbacked enforces strong passphrases but cannot prevent reuse. If passphrase is reused from a breached service, brute-force protection is bypassed unless block or archive is also protected with YubiKey. Use built-in passphrase generator.
If you lose passphrase, block, archive or derived secret becomes permanently unrecoverable. Store passphrase in your password manager or another secure location.
If block, archive or derived secret is protected with YubiKey and YubiKey is lost, secret becomes permanently unrecoverable — passphrase alone is not enough. Back up challenge-response secret or provision a second YubiKey.
If someone gains access to both block and passphrase — for example, through unlocked password manager — secret is compromised. Lock devices when away.
If malware is running on computer when you create a block, archive or derived secret, secret could be captured before encryption. For high-stakes secrets, use Superbacked OS.
For high-stakes secrets, use Superbacked OS — a hardened operating system that runs offline and persists nothing to disk.
Explore other use cases: critical credentials, signing keys and digital assets.
Copyright (c) Superbacked, Inc.