Chapter 01

Setting up, the first time

About fifteen minutes. Do it somewhere you can write things down, and don't rush the last step.

In the box#

The deviceA little larger than a pen drive, with a standard USB plug built in. No cable to lose.
Your memory cardAlready inside and formatted, unless you bought the model without one. See Storage below.
Your recovery cardA blank card. You will write on it in step 6. Keep it forever.
The red cardOne warning, printed large. Please actually read it.
Identity slipYour serial number and device fingerprint. Check it matches the screen in step 2.

Storage — which model do you have?#

The device comes in several sizes, and the card inside is removable, so you are never stuck with the one you chose.

ModelCardRoughlySuits
PasswordsNo cardPasswords and notes onlySomeone who wants a password and passkey device and nothing more
4 GB4 GB~800 scanned pagesThe essential papers
8 GB8 GB~1,600 pagesA couple's documents
16 GB16 GB~3,200 pagesA household, comfortably
32 GB32 GB~6,500 pagesA household plus years of records
Changing your mind later

Passwords, notes and every setting live in the device itself, not on the card, so the Passwords model does everything in this manual except store documents. You can add a card at any time and it will be set up for you. Moving to a larger card is a restore from your backup — see Chapter 07.

The setup#

  1. Plug it straight into a computer There is no cable. The USB plug is part of the device, so it goes into a laptop or a phone charger exactly like a pen drive. The screen lights up and shows it has never been set up. Nothing is stored yet, so nothing can be lost yet.
    VAULTPLUG GUARDIAN ───────────────────────── Not yet set up Serial VG-A32DF-99L4 Wi-Fi VaultPlug-817C Password 7fK2-mQx9-Lp4R Connect a laptop by cable, or join the Wi-Fi above.
  2. Check the fingerprint matches The serial on screen should match the slip in your box. If it does not, stop and contact us — that is the one sign of a device interfered with in transit.
  3. Connect Plugged into a laptop, it is ready to go. On a phone, join the device\'s own Wi-Fi instead. Chapter 02 explains every route.
  4. Type the six digits The screen shows a six-digit code and the setup page asks for it. This proves you are talking to your device, not something pretending to be it.
  5. Choose your master passphrase The one thing you must remember. Longer beats complicated — four or five unusual words you will not forget beats Xk9$mQ. The device will suggest one if you would rather.
  6. Write your recovery words on the card Twelve words appear on screen, once. Write them on the laminated card in pen. The device then asks you to type three of them back, to be sure you really wrote them down.
  7. Your vault opens Now, and only now, will it accept your first password or document.
Plug inno cable needed Six digitsproves it's yours Passphraseyou remember it 12 wordswrite on the card Type 3 backproves you wrote Nothing can be stored before this point no passwords, no documents, no exceptions Your vault opensnow it will accept things
Setup deliberately refuses to store anything until your recovery card exists
Why we make you do this

Every week somebody fills a vault with their whole life, forgets the passphrase, and finds the recovery card was never written. There is nothing anyone can do for them. We would rather annoy you for two minutes at the start than be the company that lost your property papers.

Where to keep your recovery words#

Anyone holding these words can open your vault, so where they live is a real decision. There is no single right answer, only trade-offs — pick deliberately rather than by default.

WhereGoodThe risk you are accepting
Written on the card, at homeNothing digital to attackFire, flood, a house move, an enthusiastic clean-up
Bank locker or with a lawyerSurvives almost anythingNot available at 2am when you actually need it
Given to your spouse or a siblingReachable, and someone else knows the plan existsYou are trusting that person completely, including if things change
Emailed to yourselfYou will still find it in ten yearsYour email account now opens your vault. If it is ever breached, so is everything.
If you email it to yourself, choose knowingly

It is a reasonable choice for many families, and far better than losing the words entirely — but understand what you are doing. Your email password now protects your entire vault, so that account needs two-factor authentication and a password you use nowhere else.

And keep it apart from your backups. If a backup file and the words that open it sit in the same inbox, the encryption stops meaning anything. Chapter 07 explains the separation.

Whatever you choose, record the serial number with it

Write your device serial — the VG- number on the screen and on your identity slip — next to the words. A future family member holding recovery words with no idea what they open is stuck. With the serial they can identify the device, look it up at vault.bendflex.in, and know what they are holding.

An extra step worth taking, if you keep papers anyway

If your family already keeps important documents in printed form — a will, policy folders, a locker file — print the words, laminate them, and put them with those papers. It costs nothing and it puts your recovery where your family already knows to look.

The arrangement we would actually recommend

Split your recovery across three people, so that any two of them together can open the vault and no single one can. It survives one lost card and one unavailable person. Chapter 06 sets this up — it takes about five minutes.

← ContentsConnecting →

BendFlex · VaultPlug Guardian · Owner's Manual v1