Skip to content

Backup and Restore a Space

Overview

This guide explains how to create an encrypted Space backup (.usbk) and restore it using the current Backup / Restore config flow.

Use this primarily for controlled data migration. UnoLock Safe storage is already highly redundant, and password-protected backups reduce your security posture if the password is weak.

Before You Start

  • Open Configuration and use Backup / Restore (not Manage Spaces) to start.
  • Use a strong, unique passphrase for backup encryption.
  • Perform backup and restore in a trusted environment.
  • Ensure you have local archive files (.ulf) available if the Space contains local archives.
  • Decide whether to include wallets. Wallet export requires WebAuthn verification.

Create a Space Backup

  1. Open Configuration.
  2. Click Backup / Restore.
  3. In the first prompt, choose Backup.
  4. Read the warning and continue only if needed.
  5. If your Safe has multiple Spaces, select which Space to back up.
  6. Enter and confirm your backup password.
  7. Choose whether to include wallets.
  8. If prompted, select the matching local archive files (.ulf) for that Space.
  9. Choose where to save the .usbk file.
  10. Wait for completion in the backup progress modal.

Restore a Space Backup

  1. Open Configuration.
  2. Click Backup / Restore.
  3. In the first prompt, choose Restore Backup.
  4. Select the .usbk file.
  5. Enter the backup password.
  6. Choose restore destination mode when prompted:
  7. Sovereign and High Risk tiers: choose Merge Into Existing Space or Create New Space.
  8. Other tiers (including free tier): restore defaults to merge into the current Space.
  9. Wait for completion in the restore progress modal.

What Gets Restored

  • Records and labels from the source Space.
  • Cloud, message, and local archives that are present in the backup.
  • Optional wallet secrets if wallet inclusion was selected during backup.

Archive ID Remapping

Restored archives receive new archive IDs in the destination Safe. Record attachments are automatically remapped so notes still point to the correct restored files.

If you choose Create New Space, the destination Space is named with a (Restored) suffix (for example, Project X (Restored)). If you choose merge mode, data is merged into the selected/current Space.

Local Archive Notes

  • Local archives are included only when matching .ulf files are provided during backup.
  • If required .ulf files are missing, backup prompts you to retry selection or cancel.
  • On tiers without cloud archive support, restored archives are written as local archives.

Wallet Notes

  • Wallet inclusion is optional.
  • Wallet secret parts are decrypted in one batched WebAuthn-assisted request during backup.
  • On restore, wallet secrets are re-encrypted using the destination Safe’s WebAuthn-protected encryption flow.

Security Warnings

  • Backup files are encrypted, but still vulnerable to offline password guessing if a weak password is used.
  • Do not store backup files in untrusted locations.
  • Do not treat backups as a replacement for normal Safe key hygiene (multiple keys, LockoutGuard, and operational controls).

Troubleshooting

Restore fails with password/corruption error

  • Verify password exactly.
  • Verify backup file integrity and full file transfer.

Some files are missing after restore

  • Check the skipped archive count in completion details.
  • Re-run backup with all required local .ulf files selected.
  • For merge restores, verify you are viewing the destination/current Space.

Wallets did not restore as expected

  • Confirm wallet inclusion was selected during backup.
  • Complete required WebAuthn verification prompts during backup and restore.