Sync between devices

How it works

Sync is optional and off by default. There is no Burrow cloud: you run the server yourself, or use one run by someone you trust.

Everything is encrypted on your device before it’s uploaded. The key never leaves your device, so the server stores data it can’t read.

What syncs

• hosts, including saved passwords
• keys, including private keys and passphrases
• snippets
• known hosts
• settings

How changes are merged

Every item is merged on its own. If the same item was changed on two devices, the newer change wins.

Deleting something on one device deletes it on all of them.

When it syncs

• a few seconds after you change something
• every 5 minutes
• when you unlock the vault

Sync now syncs right away.

Create an account

You need a sync server first. Self-hosting overview explains how to run one. Then, on your first device:

1. 01Go to Settings → Sync → Create account.
2. 02Enter the server address. It must start with https://.
3. 03Choose a user name: 3 to 32 characters from a-z, 0-9, dot, underscore and dash.
4. 04Choose an account password. It follows the same rules as the master password: at least 12 characters, with a number and a special character. Don’t use it anywhere else.
5. 05Enter the invite code from the server admin.

Log in on another device

On every other device, go to Settings → Sync → Log in and use the same server, user name and account password.

Manage your account

These are under Settings → Sync as well:

• Change the account password. Your other devices then have to log in again.
• Log out. Sync stops on this device. Your local data stays as it is.
• Delete the account. This deletes your data on the server.

What the server operator can see

Whoever runs the sync server can see:

• user names
• the IP addresses of the devices that connect
• when data is uploaded, and how much

They can’t read or change your data. They could delete it, though, or hand out an older copy. So only use a server run by someone you trust with that, or run your own.