What Is a Recovery Phrase for Encrypted Notes?

A recovery phrase for encrypted notes is a short list of ordinary English words, usually 12 or 24 of them, that stands in for the secret protecting your notes. It is not a password hint or a second password. It is key material rather than the key you type: the words encode a large random number that the app turns back into the secret it needs to unlock your encryption key. Enter the words in the right order on a new device and your notes open again.

You need one because properly encrypted notes have no password reset. In an end-to-end encrypted system, the server stores scrambled data and never holds the key that unscrambles it, so nobody can email you a reset link. There is nothing on the other end to reset.

The recovery phrase replaces that missing safety net. It survives a lost password, a wiped laptop, and a phone that went into a river.

What BIP39 is

BIP39, short for Bitcoin Improvement Proposal 39, is a public standard for turning a random number into words and back again. Cryptocurrency wallets are where most people meet it, but it turns up anywhere a person has to carry a large random number without corrupting it.

Each supported language has its own list of 2,048 words, and English is the one you will almost always see. No two English words share their first four letters, so a smudged or half-remembered word is usually still unambiguous. The final word also carries a short checksum over the rest of the phrase, so most typos and swaps fail that check and the app rejects the phrase.

That check is only four bits on a twelve-word phrase, so it catches most mistakes rather than all of them. Read the words back against your written copy instead of trusting the app to spot every error.

What the phrase can and cannot recover

The phrase recovers	The phrase does not recover
Your vault key on a new device, once you have signed into your account there	Your account sign-in itself, which uses your normal credentials
The encrypted copies on the server, after you forget your sync password	Notes you never encrypted or uploaded, which need no phrase at all
Your notes years from now, on hardware you do not own yet	Data that has been permanently deleted from the server

The phrase is a key, not a backup. If the encrypted data is gone, the key opens nothing. Keep a copy of the phrase and a copy of the data, in different places.

Where a recovery phrase fits in Jotura

Jotura has two halves, and only one of them involves a phrase.

Your notes on your own machine are plain .md files in an ordinary folder. No encrypted container or proprietary database sits around them, so nothing needs unlocking. Copy the folder to a USB stick and any text editor can open the files. At-rest protection on that machine is your operating system’s job, through FileVault or BitLocker.

Jotura Sync is the optional paid layer, £4 a month or £40 a year, with no free trial. It encrypts every note on your device before anything leaves it, so the server holds ciphertext and never sees your filenames. How end-to-end encrypted note sync works covers the key derivation and path hashing.

Jotura’s recovery phrase is twelve BIP39 words. The app shows it once, when you enable sync, and never stores it on the server. It encrypts a copy of your master key, so the words do not replace your password: they hand that copy back when the password is gone. The security page lists the rest of the stack.

Jotura runs on Mac, Windows, Linux, and Android. There is no iOS app, so an iPhone is not one of the devices you can recover onto.

Using the phrase from the command line

The jotura command-line tool ships with the app. On a machine that already has the vault, this signs sync back in with the words instead of the password:

jotura sync login --recovery-phrase

Enabling sync and issuing the phrase happen in the desktop app, not the CLI. To check whether a folder is synced at all, run jotura sync status. It always succeeds, and reports enabled: false for a vault with no sync configured. jotura sync login on that same vault exits with code 12 and a SyncNotEnabled error.

How to store the phrase

Treat the phrase like a spare key to everything you own: a copy that survives fire, theft, and forgetfulness, without being readable by anyone passing your desk.

Method	Verdict
Paper, kept where you keep a passport	Good. It is simple, offline, and survives any device failure.
Stamped into a metal backup plate	Best for long horizons. Metal survives water and most fires.
A password manager you can open without this phrase	Good. Keep an offline copy too, in case you lose access to it.
A note inside the vault the phrase protects	Useless. You would need the phrase to read it.
A phone photo, a cloud file, or an email to yourself	Bad. Each one syncs or sits in a searchable mailbox, which widens the reach of any breach.

Two copies in two buildings is a reasonable target. If a single break-in worries you, keep the paper’s location in your head rather than in a document.

If you lose the phrase

The phrase is shown once. If you did not write it down then, no support ticket produces a copy.

While you still have your password and a signed-in device, nothing is lost yet. Your notes keep syncing and your local files are untouched. But the spare route in is gone, which makes the next forgotten password the expensive one.

If the phrase, the password, and every signed-in device go at once, the encrypted copies on the server are unrecoverable. That is the honest cost of a system where the provider genuinely cannot read your notes. Your local markdown files are unaffected either way.

A service that can restore your data after you have lost every key is holding a key of its own. That is a real trade, not a failing. Those users never lose an archive to a mislaid slip of paper, and they rely on the provider not to read or hand over the plaintext. Can my notes app read my notes is worth asking of any app you trust with this much.

Common questions

Is the recovery phrase the same as my password? No. The password is what you type day to day. The phrase is the rarely used backup route to your key, and it should never sit in the same place as the password.

Can I choose my own words? No. The words encode random key material, so anything you picked yourself would be guessable, and the checksum would reject it anyway.

What if someone sees my phrase? Treat everything synced under that key as exposed. Encrypting under a new key protects what you write next, and it cannot un-expose anything an attacker already copied.

Do I need a phrase if I never turn sync on? No. A local-only Jotura vault is plain markdown on your disk, and nothing about it is locked.