Recover access with the emergency kit

If none of your account's passkeys unlocks any more or nobody in the team has access any more, open the encrypted data again with the emergency kit. The kit then counts as spent, and you create a new one right away.

Prerequisites

Account type Super admin. Anyone who is not a super admin asks a team member with access for an emoji comparison: Set up access to encrypted data.
The tenant's current emergency kit, printed or as a PDF.
Access to the mailbox of your account's email address.
A passkey of your account that can derive keys, e.g. one stored in iCloud, Google or 1Password. If there is none, set one up first: Set up a passkey.
The encryption is Active.

Steps

Select Settings > Privacy > Encryption.
Select Recover with the emergency kit ….
Enter the recovery key:
- Enter the key from the kit, e.g. R1-7K3QD-MX9TA-2PHVB-WN4CE-8RJ6F-GZ5SY.
- Or select Scan QR code and hold the kit's QR code in front of the camera.
Select Continue.

beispiel.fepli.eu/admin/einstellungen/datenschutz/verschluesselung

☀️

Settings/Privacy/EncryptionNew⌘ ↵

Settings

GeneralRegistrationOffersPaymentsPrivacyIntegrationsApp-Store

Deletion periodsRetentionPrivacy statementEncryption

Encryption of this tenant

Encrypts the names and dates of birth of children, health information and sensitive details of Ferienpass Elmsbrück in the browser. The tenant keeps the recovery key; fepli cannot reset it.

EncryptedActiveSince 01.03.2027 · names, dates of birth, health information

Fingerprint4F2A 9C1E 77B0 D3A5 0E6C 18F9(as the server says; unlock to check)Emergency kitCreated on 01.03.2027 by Robin Beispiel

Create new emergency kit …Creates a new recovery key. The previous kit becomes invalid.

Recover with the emergency kit …If none of your passkeys unlocks any more, or on a new device without a key.

Step 1 of 4Recover with the emergency kit

Enter the recovery key from the emergency kit of Ferienpass Elmsbrück, or scan the QR code on it.

Recovery keyR1-7K3QD-MX9TA-2PHVB-WN4CE-8RJ6F-GZ5SYScan QR code

CancelContinue

The Encryption page and the first step of the recovery.

In the email “Recover access with the emergency kit”, open the link, sign in with your account and select Confirm the recovery.
Switch back to the window with the dialog and compare the Fingerprint with the one on the kit.
If both match character by character, tick “The fingerprint matches the one on the emergency kit, character by character.” If it differs, close the dialog and contact fepli.
Select Confirm with passkey and confirm with the passkey you will unlock with from now on.

Step 2 of 4Confirm by e-mail

We sent a link to robin.beispiel@example.org. Open it, sign in and confirm the recovery. This window then goes on by itself.

Waiting for the confirmation …

CancelI have confirmed

beispiel.fepli.eu/admin/e2e/wiederherstellen?token=…

Confirm the recovery

On 14.03.2027 at 09:12, the code from the emergency kit was entered for your account robin.beispiel@example.org. Only confirm if that was you.

Confirm the recovery

That was not you? Confirm nothing and tell your team right away: somebody else has the code of the emergency kit.

Step 3 of 4Connect a new passkey

The team key is open. Compare the fingerprint with the one on the emergency kit. Only if it matches, confirm with the passkey you will unlock with from now on. If it differs, cancel and contact fepli.

Fingerprint4F2A 9C1E 77B0 D3A5 0E6C 18F9The fingerprint matches the one on the emergency kit, character by character.

RBRobin BeispielSuper admin · one passkey

Confirm with passkey

The confirmation by email and the new passkey.

Select Download emergency kit (PDF) and save the kit as a PDF in the print dialog or print it.
Enter the 4 characters of the new recovery key whose positions the dialog names.
Select Activate new kit.
Destroy all copies of the previous kit.

Step 4 of 4Save emergency kit

The code of the previous emergency kit is spent. Save a new kit now; only then is the tenant covered again.

fepliEmergency kit · Ferienpass ElmsbrückA4, one page. Choose “Save as PDF” in the print dialog – or print it right away.Download again

To confirm, enter characters 3, 11, 17, 26 of the recovery key (without “R1-” and dashes).3TBF

Enter the characters from the kit.CancelActivate new kit

The last step: a new emergency kit.

Result

Your new passkey unlocks the encrypted data, and the new kit replaces the spent one. All super admins and all accounts with access receive the email “Emergency kit used – create a new one”; the log of the data subject rights records Access recovered with the emergency kit.

If it does not work

Problem	Remedy
“The key contains a typo: the check digit does not match. …”	Compare the key character by character with the kit. Whether you enter `0` or `O`, `1` or `I` makes no difference.
“This emergency kit is no longer valid: …”	Since the date named, a newer kit applies. Use the new one.
“Access was already recovered with this emergency kit on {date}. …”	The kit is spent. Ask a team member with access for an emoji comparison and then for a new kit. If nobody in your team did this, contact fepli right away.
The email does not arrive.	The link goes to your account's address and is valid for 30 minutes. Check the spam folder or start again; a new recovery replaces the old one.
The page behind the link shows Invalid link.	Sign in with the account that entered the key and open the link again.
Confirm with passkey cannot be selected.	Tick the box about the fingerprint first. If the fingerprint does not match the kit, close the dialog and contact fepli.
Recover with the emergency kit … is missing.	The kit has already been used, or the encryption is not Active.
You closed the dialog after the new passkey.	The page shows that the kit has been used. Create the new kit now: Create a new emergency kit.

Prerequisites

Steps

Result

If it does not work

See also