Signing in and the encrypted vault
When you sign in, Varuno briefly shows “Opening your account”. In that moment it is opening your vault: an encrypted SQLite database (AES-256) stored on your device, with the encryption key held in your phone’s secure storage (the iOS Keychain).
Each account on a device gets its own database file and its own key. If two people sign in on the same phone at different times, neither account can read the other’s data.
Signing in needs a network connection; day-to-day use of your data afterwards does not.
Vault messages and what to do
- “Varuno could not reach this device’s secure storage.” The device keychain was unavailable — this can happen if the device was locked during startup. Unlock the device and try again. If it keeps happening, contact support with your app and iOS versions.
- “The encryption key for your data is missing.” The key lives in the device keychain. If the app’s data was restored from a device backup or migration without that key, the database cannot be decrypted. The way back is to sign in fresh and restore a Varuno backup file — see Restoring a backup. This situation is always worth reporting; tell us whether the device was recently restored or migrated, but do not send any database or backup files.
- “Your financial data could not be read.” The local database could not be opened. Restore from a Varuno backup if you have one, and report the issue — again, without attaching files.
Signing out
Signing out closes the vault. Your data stays on the device, encrypted, and reopens next time you sign in to the same account.