Chapter 01

Setting up, the first time

About fifteen minutes. Do it somewhere you can write things down, and don't rush the last step.

In the box#

The deviceA little larger than a pen drive, with a standard USB plug built in. No cable to lose.
Your memory cardAlready inside and formatted, unless you bought the model without one. See Storage below.
Your recovery cardA blank card. You will write on it in step 6. Keep it forever.
The red cardOne warning, printed large. Please actually read it.
Identity slipYour serial number and device fingerprint. Check it matches the screen in step 2.

Storage — which model do you have?#

The device comes in several sizes, and the card inside is removable, so you are never stuck with the one you chose.

ModelCardRoughlySuits
PasswordsNo cardPasswords and notes onlySomeone who wants a password and passkey device and nothing more
4 GB4 GB~800 scanned pagesThe essential papers
8 GB8 GB~1,600 pagesA couple's documents
16 GB16 GB~3,200 pagesA household, comfortably
32 GB32 GB~6,500 pagesA household plus years of records
64 GB64 GB~13,000 pagesA household that scans everything
Changing your mind later

Passwords, notes and every setting live in the device itself, not on the card, so the Passwords model does everything in this manual except store documents. You can add a card at any time and it will be set up for you. Do not swap a card that already holds documents. Restoring a backup onto a new card is not built yet, so the documents on the old card do not move across — and the Vault cannot put them back. If you outgrow a card, keep the old one safe until restore ships; see Chapter 07.

The setup#

Before you choose a passphrase, know this

Right now, if you forget it, your vault is gone for good. There is no "forgot password," and the recovery words you write down in step 6 do not open anything yet — that ability arrives in a future update, and until then your passphrase is the only door there is. Choose one you genuinely will not forget, or let the device generate one for you and keep it somewhere safe until it is memorised.

  1. Plug it straight into a computer There is no cable. The USB plug is part of the device, so it goes into a laptop or a phone charger exactly like a pen drive. The screen lights up and shows it has never been set up. Nothing is stored yet, so nothing can be lost yet.
    VAULTPLUG GUARDIAN ───────────────────────── Not yet set up Serial VG-A32DF-99L4 Wi-Fi VaultPlug-817C Password 7fK2-mQx9-Lp4R Connect a laptop by cable, or join the Wi-Fi above.
  2. Check the fingerprint matches The serial on screen should match the slip in your box. If it does not, stop and contact us — that is the one sign of a device interfered with in transit.
  3. Connect Plugged into a laptop, it is ready to go. On a phone, join the device\'s own Wi-Fi instead. Chapter 02 explains every route.
  4. Type the six digits The screen shows a six-digit code and the setup page asks for it. This proves you are talking to your device, not something pretending to be it.
  5. Choose your master passphrase The one thing you must remember, and today the only thing that opens your vault. Longer beats complicated — six unusual words you will not forget beats Password1!, and the device will suggest six random ones for you if you would rather not invent your own.
  6. Write your recovery words on the card Twelve words appear on screen, once. Write them on the laminated card in pen. The device then asks you to type three of them back, to be sure you really wrote them down. These words do not open your vault yet — that comes in a future update — but write them down anyway, so you are ready the day it arrives.
  7. Your vault opens Now, and only now, will it accept your first password or document.
Plug inno cable needed Six digitsproves it's yours Passphraseyou remember it 12 wordswrite on the card Type 3 backproves you wrote Nothing can be stored before this point no passwords, no documents, no exceptions Your vault opensnow it will accept things
Setup deliberately refuses to store anything until your recovery card exists
Why we make you do this anyway

Setup writes something to the device right now that ties itself to these exact twelve words — sealed alongside your passphrase, at the same moment, and not something we can add to your vault later. That is the half of recovery that has to happen today or not at all. Making the words open your vault is the half we can still ship in an update; making a vault built without that seal recoverable is not. So a vault set up today, with the words written down, will be recoverable once the update lands. A vault set up today with the card left blank will not — no update can fix that retroactively. We would rather annoy you for two minutes now than be the company that could have made your vault recoverable and didn't ask.

Where to keep your recovery words#

They do not open your vault today, but treat them as if they already did — anyone who will be able to use them once the update lands can also lose or expose them today. Where they live is a real decision. There is no single right answer, only trade-offs — pick deliberately rather than by default.

WhereGoodThe risk you are accepting
Written on the card, at homeNothing digital to attackFire, flood, a house move, an enthusiastic clean-up
Bank locker or with a lawyerSurvives almost anythingNot available at 2am when you actually need it
Given to your spouse or a siblingReachable, and someone else knows the plan existsYou are trusting that person completely, including if things change
Emailed to yourselfYou will still find it in ten yearsYour email account now opens your vault. If it is ever breached, so is everything.
If you email it to yourself, choose knowingly

It is a reasonable choice for many families, and far better than losing the words entirely — but understand what you are doing. Your email password now protects your entire vault, so that account needs two-factor authentication and a password you use nowhere else.

And keep it apart from your backups. If a backup file and the words that open it sit in the same inbox, the encryption stops meaning anything. Chapter 07 explains the separation.

Whatever you choose, record the serial number with it

Write your device serial — the VG- number on the screen and on your identity slip — next to the words. A future family member holding recovery words with no idea what they open is stuck. With the serial they can identify the device, look it up at vault.bendflex.in, and know what they are holding.

An extra step worth taking, if you keep papers anyway

If your family already keeps important documents in printed form — a will, policy folders, a locker file — print the words, laminate them, and put them with those papers. It costs nothing and it puts your recovery where your family already knows to look.

Coming later: splitting your recovery across people

The plan is to let you split your recovery across three people, so that any two of them together can restore the vault and no single one can — surviving one lost card and one unavailable person. That is not built yet. Chapter 06 has the detail on what exists today and what is still ahead.

← ContentsConnecting →

BendFlex® Vault · Owner's Manual v2.1 · last updated 27 August 2026