Encryption Keys and Security in Afina#

In this guide, you will learn how to create a key file when launching Afina for the first time, store it in a secure location, change your master password, and transfer keys to another device. These actions protect your accounts, cookies, and all encrypted data in the application.

What is the key file and why is it needed The key file encrypts your accounts, cookies, and all sensitive data in Afina. The master password protects the key file itself and confirms the right of access to key-related actions. Without both components, it is impossible to access or restore encrypted data.

Creating the Key File on First Launch#

When you first launch Afina or migrate from an older version, the application automatically opens the encryption setup window. You cannot continue without completing these steps.

1. Create a new key file

1. In the "Master password" field, enter your password: if this is a migration from an older version — enter the old master password; if this is a first launch — set a new password.
2. Click Create new key file to start generating the encrypted key.

The screenshot below shows the Afina first launch window with the master password input field and the button to generate a new key file.

2. Save the newly created key file

After clicking, Afina will generate the key file and display a system message: "A new encrypted key file has been created. Save it in a secure location before continuing". The window is locked — it cannot be closed until the key file has been saved to the device.

Click Save key file in this window. In the system folder selection dialog, specify the save path and confirm.

The screenshot below shows the confirmation window with the newly generated key file and a warning about the need to save it before continuing.

3. Save the key to your device

Choose a reliable location — not the application's own folder and not a publicly accessible directory.

What the master password protects and what the key file encrypts

• The "key file" encrypts your data, such as accounts and cookies, and all sensitive data in Afina.
• The "master password" protects the key file and confirms the right of access to key-related actions.

This completes the migration from the old version or the installation and configuration of the new Afina 2.0.0+ version.

Secure Key File Storage#

For reliable data protection, additionally store a copy of the key file on an external drive or in your own secure storage. Your key file is always encrypted with the master password — it is impossible to open the file without it.

All key file and master password settings are located in the Cloud tab on the application settings page. Below is step-by-step navigation to this section.

1. Key file and master password management can be found by clicking Afina Main Settings

Click the gear icon in the upper right corner of the main Afina window. Then click Afina Main Settings The "Settings" page will open.

The screenshot below shows the location of the Afina Main Settings icon in the main application interface.

2. Then click Cloud

On the "Settings" page, find and click the Cloud tab. This tab contains all the tools for working with the key file and master password: saving locally, viewing the QR code, and changing the password.

The screenshot below shows the "Settings" page with the "Cloud" tab open and the available key file management options.

Change Master Password#

To replace your current master password, follow these steps in the Cloud tab.

1. Find the "Change master password" toggle and enable it — it should become active (blue).
2. After enabling the toggle, you need to fill in the two form fields that appear.
3. In the "Current master password" field, enter your current master password to confirm access rights.
4. In the "New master password" field, enter the desired new password. An eye icon is available for each field — click it to temporarily show or hide the entered characters.
5. After filling in both fields, you must click Save changes — without this step, the changes will not be applied.

The screenshot below shows the activated master password change form with two input fields, character visibility icons, and the save changes button.

Save Key File#

This option allows you to save a current copy of the key file to the device at any time or get a QR code for transfer between devices.

1. In the Cloud tab, find the "Save key file" toggle and enable it — it should become active.
2. After enabling the toggle, a "Master password" field appears to confirm access. Enter your current master password in this field.
3. After entering the master password, two actions become available:
   • Click Save key file — a system folder selection dialog will open. Specify the desired path on the disk and confirm the selection. Afina will save the encrypted key file locally on your device.
   • Click Show key file QR code — Afina will open a QR code that can be scanned to transfer or save the key file in another way.

The screenshot below shows the activated key file saving form with the master password confirmation field and two buttons — for local saving and displaying the QR code.

Transferring the Key to Another Device#

To access encrypted data on a new PC, you need to transfer the key file and use the same master password. Without both components, it is impossible to decrypt the data.

1. On the current PC, save the key file using the Save key file button (see the "Save Key File" section above) or use the QR code.
2. Transfer the saved file to the new PC: copy it via USB drive, cloud storage, or any other secure method. Always keep the key file and master password separate from each other.
3. Launch Afina on the new PC. On first launch, the application will display a window for choosing the encryption setup method. Select the option to load an existing key file.

The screenshot below shows the encryption setup method selection window on the first launch of Afina on a new device, with the option to load an existing key file.

4. Load the saved key file from the disk. Afina will decrypt the file and provide full access to your encrypted data.

The screenshot below shows the key file loading screen on the first launch on a new device.

Storage and Transfer Rules#

• store the key file separately from the cloud storage with profiles;
• store the key file and master password in a reliable location — always separately;
• do not share the key file with other users;
• do not store the key file in publicly accessible locations.

Working with one folder on multiple PCs All devices must have exactly the same key file loaded with the same master password. To synchronize sessions between devices, set up cloud synchronization:

• On PC 1, enable the "Automatic account file upload" toggle. After finishing work with a profile, always wait for full cloud synchronization before shutting down.
• On PC 2, connect the same cloud account and enable the "Automatic account file download" toggle — before each profile launch, the system will automatically download the latest session from the cloud.
• Additionally, enable the "Automatic settings backup" toggle to synchronize global variables, groups, extensions, and proxy lists across all PCs.