# Sync of keys and passwords

By default, Termius encrypts your data and syncs it across your vaults. Termius provides password-manager-grade security standards, ensuring your data is encrypted before it leaves your device.

{% hint style="info" %}
Learn more about the Encryption in Termius, see the [Encryption overview](/security/encryption-overview.md).
{% endhint %}

At some companies, however, there are strict requirements for credentials to be kept locally and never synced, even in an encrypted format. Termius allows disabling the credentials synchronization to help with such cases.

<details>

<summary>What counts as credentials?</summary>

Usernames, passwords, SSH keys, and identities.

</details>

<details>

<summary>How to disable the credentials synchronization?</summary>

You can disable the synchronization of your credentials stored in the Personal vault in Termius. To do so, you need to:&#x20;

1. Open `Termius > Settings > Account`
2. Disable the `Sync keys and identities` toggle under the Synchronization section

</details>

<details>

<summary>Can I stop all the data from synchronizing?</summary>

If you have an account, then no, you can't.&#x20;

The `Sync keys and identities` toggle only controls the credentials part.&#x20;

The rest of the data (hosts, groups, snippets, etc.) stays encrypted and synced across your vaults.

{% hint style="info" %}
While the synchronization is not working in the free Starter plan, you might activate a Pro or Team trial at some point and the data will be synced then.
{% endhint %}

</details>

<details>

<summary>What will happen with my credentials if I log out?</summary>

If you log out, all the local data will be cleared.&#x20;

{% hint style="danger" %}
If synchronization of your credentials is disabled, they will also be cleared.&#x20;
{% endhint %}

</details>

<details>

<summary>What changes on my other devices when I disable the credentials sync?</summary>

Your other devices will still receive all other data, but not credentials.

This also means you will need to manually replicate the same set of credentials on all your devices.

</details>

<details>

<summary>When it makes sense to disable the credentials synchronization?</summary>

There are a number of reasons for that. It all depends on the environment you operate in. To name a few:

* Your security policy restricts credential sync
* You want each device to hold its own set of credentials. However, in that case, you can also utilize the biometric SSH keys that never leave your device anyway
* You don't need to sync credentials at all

</details>

<details>

<summary>I see it can be disabled for the Personal vault. What about the Team vault?</summary>

The `Sync keys and identities` toggle only controls the credentials in the Personal vault.&#x20;

When you specify the credentials for your hosts in the Team vault, you can choose whether to share them with the team or require team members to use credentials from their Personal vault.&#x20;

If you choose to store your credentials in Personal vault to keep usernames/passwords/keys only locally, each team member will need to disable credentials sync accordingly.&#x20;

</details>

{% hint style="danger" %}
**IMPORTANT**

When the `Sync keys and identities` toggle is disabled, the credentials data is not synced, and is only kept locally.&#x20;

If you log out and the data gets cleared, Termius won't be able to help with the data recovery.&#x20;
{% endhint %}

### Related concepts

To understand how synced data is organized, see [Learn about vaults](/getting-started/learn-about-vaults.md).

For encryption details, see [Encryption overview](/security/encryption-overview.md).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.termius.com/keychain/sync-of-keys-and-passwords.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.