Product data sheet
liber sync
liber sync copies your accounts, passwords, settings, rules and encryption keys to all your devices. Everything is encrypted on your device before upload. The service cannot read any of it.
What it does
Set up liber once. Your other devices get the same accounts, passwords, identities, filing rules and encryption keys. Change something on one device and the others pick it up.
Mail is not synced. Mail stays between your devices and the mail server.
What syncs
| Accounts | Server settings and identities for every account. |
|---|---|
| Credentials | Passwords, app passwords and sign-in tokens. |
| Settings | The client's settings. |
| Rules | Filing rules, per account. |
| Contacts | The address book connection. |
| OpenPGP keys | Public keys always. Private keys only with your approval on the device. |
Security properties
| Sealing | Every item is encrypted on your device before upload, under a hybrid post-quantum scheme. The service stores ciphertext and has no key to it. |
|---|---|
| Adding a device | A device you already have must sign the approval. We cannot add a device to your vault. |
| Recovery | An optional recovery code, shown once. Without it, losing every device closes the vault for good. No one can reset it. |
| If you stop paying | Your data stays readable on every device. Writes continue through a grace window, then stop until you subscribe again. |
Arrangement
Encryption keys exist only on your devices. The vault stores sealed documents. A new device is approved with a short code shown on both screens.
Keys stay on the devices. The vault holds ciphertext. New devices are approved by your devices, never by us.
Ordering
USD 2.99 a month. One subscription covers one person and all their devices. Subscribe in the app, under Settings, Sync.
Cancel any time. After the paid period and a grace window, the vault is read only until you subscribe again. You can always read your data out.
Organizations provision sync centrally. See the organization brief.
The client is free and complete without sync.