TagVault safety notice — version 1

TagVault encrypts short text on this device and can write the encrypted record to an NFC tag. The tag stores ciphertext, not the passphrase.

NFC tags can be copied. Anyone with a copy can make offline guesses at the passphrase. A weak or reused passphrase can put the secret at risk; encryption cannot compensate for a guessable passphrase. Generated passphrases are recommended. Custom passphrase strength is not measured.

Keep an independent recovery copy of both the secret and the passphrase. If you lose the passphrase, the encrypted record may be unrecoverable. Do not make an NFC tag the only copy of an important password, recovery phrase, or key.

A successful write is read back and compared during that NFC session. This check does not guarantee the tag will remain readable later or that a separate backup exists. Keep the original secret until you have independently read and decrypted the tag.

TagVault is not a FIDO2 security key, secure element, hardware wallet, or anti-cloning system. A copied valid record can be replayed. Keep your phone and passphrase private and use the app on a device you trust.

This version of TagVault has no user account or server-side copy. The acknowledgement is stored on this device. It does not prove identity, guarantee recovery, or replace legal terms or professional advice.