VaultOne: Activate Password Backup Feature

In the event that the VaultOne platform becomes unavailable, you can still access your credentials offline by using the password backup feature. After activating the password backup feature, a unique backup key will be generated that will allow you to access all stored credentials offline in case of internet outages or any other platform unavailability.

This is a critical security configuration and should be set up by the primary account administrator.

Requirements

To access your passwords stored in the VaultOne Platform offline, you must:

  • Have a connector installed locally or on a network you can access
  • The password backup feature has been enabled in the administration settings
  • Access to the printed or securely stored backup key

Activate Backup Feature

Important:

The backup key is company property and should not be treated as personal information by the administrator.

  1. In the administration menu, go to Settings > Backup tab.
  2. Click Generate Key.
  3. When the confirmation window appears, click Yes to activate the backup system.

Warning:

The backup key will be displayed only once. Copy and store it to a secure location, like the JumpCloud Password Manager.

If the backup key is lost, you can generate a new one; however, all data encrypted with the previous key will be lost, and a new backup file will be created.

Break-the-Glass: Accessing Your Backup

List Available Backups

Connect to your VaultOne Connector shell and run the following command as root:

docker exec -ti vo-sync /opt/vosession/bin/backupviewer list

This will display a list of available backup files.

Open the Desired Backup File

To open a specific backup by date, use:

docker exec -ti vo-sync /opt/vosession/bin/backupviewer open <FILE_NUMBER.bkp>

Complete the Security Prompts

You will be prompted to:

  • Confirm you want to open the backup file, type Y for Yes or N for No
  • Provide a reason for accessing the backup - this will be logged for auditing purposes.
  • Enter the VaultOne Key Passphrase to decrypt the file:
    • The key will not be visible as you type

Access Your Data

Once authenticated, you can browse your data offline. When VaultOne becomes available again, you can resume normal operations.

Note:

If a backup file does not change from day to the next, it means there were no new records added to VaultOne. The most recent backup file will always be considered the latest.

Back to Top

List IconIn this Article

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case