Connected devices

Connected Devices is the trust list for web browsers and Android installs that can access the synced vault.

Visual checklist

• Current device visible The device you are using should be clearly marked as this device or current device.
• New device named After Link New Device completes, give the new phone, browser, or laptop a recognizable name.
• Sync after trust changes After recognizing or removing a device, run sync so other devices receive the trust update.

What the device list means

• This device The device or browser currently open.
• Trusted device A device that linked, restored with approval, or was explicitly recognized by you.
• Unknown device alert A warning that a device appeared outside the Link New Device flow.
• Removed device A device that must link again or restore before it can use synced vault access.

Link a new device

1. 1
   Open Settings on a trusted device.

   Select Link New Device and keep the source device open.

2. 2
   Show the invite.

   Display the QR code or copy the transfer code.

3. 3
   Open GitVault on the new device.

   Choose Link New Device from onboarding or the add-device flow.

4. 4
   Scan or paste the invite.

   Enter the short PIN shown by the trusted device.

5. 5
   Name the device.

   The new device becomes trusted only after the invite is consumed successfully.

Device added outside Link New Device

If a device appears without the Link New Device flow, GitVault warns other trusted devices. Choose "I recognize this device" only when the device, time, and context match your own action. If not, remove the device and rotate the GitHub token.

Remove a device

1. 1
   Open Settings, then Connected Devices.

   Use a trusted device that can sync.

2. 2
   Select remove for the device.

   The device is no longer trusted after this change syncs.

3. 3
   Rotate credentials when needed.

   If the removed device may be compromised, create a new GitHub token and revoke the old token.

When a removed device opens

When the removed device opens or checks trust, GitVault clears local sync access. The device must use Link New Device or the recovery flow before it can access synced data again.