Your backup plan just got a backup plan: Multiple YubiKeys

Hey there,

Big update today: VaultSort now supports multiple YubiKeys.

This has been one of the most requested features since launch, and I'm excited to finally ship it.

What's New

Register multiple YubiKeys - Keep a backup key in your safe, give one to your spouse, or maintain separate keys for home and office. All registered to the same VaultSort.

Named key management - When you register a key, you can give it a name like "Office YubiKey" or "Backup - Safe Deposit Box." No more guessing which key is which.

Seamless key rotation - Add new keys or revoke old ones without re-encrypting your entire data. Lost a key? Remove it and keep working.

WebAuthn/FIDO2 standard - WebAuthn, the same protocol used by Google, GitHub, and Microsoft for hardware key authentication. Battle-tested security, no proprietary lock-in.

Works with any WebAuthn key - While we call it "YubiKey support," this feature works with any hardware security key that supports the WebAuthn/FIDO2 protocol - including Titan, Thetis, OnlyKey, and others.

Why This Matters

The number one concern I heard from users: "What happens if I lose my YubiKey?"

Before today, losing your key meant losing access to your data. Now, you can register a backup key from day one. Keep it somewhere safe. If your primary key goes missing, you're covered.

For those of you sharing access with family members or colleagues, you can now register their YubiKeys directly - no shared passwords, no workarounds.

How to Get Started

1. Open VaultSort and click the YubiKey configuration button
2. Click Register YubiKey
3. Give your key a name
4. Touch your YubiKey
5. Repeat for any backup keys

That's it. Your existing encrypted files work exactly as before with complete backwards compatibility.

Credential Export/Import: Your Keys, Anywhere

This update also includes credential backup and restore. You can now export your registered YubiKey credentials and import them on a new machine.

What this means for you:

• New computer? Export your credentials, set up VaultSort on your new machine, import—and your YubiKeys work immediately with your existing encrypted files.
• Fresh install? No need to re-register keys or re-encrypt data. Just restore your credential backup.
• Multiple machines? Keep your credentials synced across your desktop and laptop.

Your encrypted files remain portable. Copy them to a new machine, import your credential backup, plug in your YubiKey, and you're back in business. No cloud sync required.

• Note: The credential export contains the public key data needed to verify your YubiKey. Your private keys never leave your hardware token.*

As always, reply to this email if you have questions, feedback, or feature requests. I read every message.

Thanks for being part of the VaultSort community.

Justin