Backup and remote wipe

Creating an account

An account is optional but required for backup and wipe features.

Create your account in the Ndevar app (not at account.ndevar.com). This is intentional: your identity is created on your device before an account exists, ensuring your cryptographic identity is always device-native.

Go to Settings → Account
Tap Create account
Enter your email address
Verify via the link sent to your email

Your device identity (Ed25519 keypair) is not stored on our servers and is not changed by creating an account.

Encrypted backup (Protect plan)

The Protect plan adds encrypted cloud backup for your device identity and settings.

What's backed up:

Your Ed25519 identity keypair (encrypted with your recovery key)
Your contact list (encrypted)
Your preferences and settings (encrypted)

What's not backed up:

Messages (never stored anywhere — not backed up by design)
Payment information (managed by the App Store)

Recovery key

When you enable backup, you're given a BIP39 recovery key — a 12-word phrase. Write this down and store it somewhere safe.

Your recovery key encrypts your backup. Ndevar cannot decrypt your backup — if you lose your recovery key, your backup cannot be restored.

Remote wipe

The Protect plan allows remote wipe from the account portal at account.ndevar.com.

Remote wipe deletes your identity and settings from the device, and invalidates your session. Use this if your device is lost or stolen.

Protect: Remote wipe for 1 device.

Protect+: Per-device wipe and restore for up to 5 devices.

Restore to a new device

If you have backup enabled:

Download Ndevar on your new device
Go to Settings → Account → Restore from backup
Sign in with your email
Enter your 12-word recovery key
Your identity and contacts are restored

Messages cannot be restored — they were never stored. Restore gives you back your identity, contacts, and settings only.

Cancelling Protect

If you cancel Protect, your encrypted backup is retained for 30 days then deleted. Your device identity is unaffected — it lives on your device, not in the backup.