PrivacyWhy an encrypted vault still needs a backup加密保险库为什么仍需独立备份
Encryption cannot restore deleted ciphertext or a lost drive.加密不能重建已删除的密文或丢失的硬盘。
Confidentiality is not availability保密不等于不会丢失
Encryption is intended to keep stored content unreadable without the right secret. It does not stop accidental deletion of the outer .pvv folder, physical failure, corruption or loss of the entire drive. The app's trash can help with some item-level mistakes until it is emptied; it is not an independent backup. A recovery key can reset access to an intact vault but cannot recreate missing objects.加密旨在让缺少正确秘密的人读不懂保存内容，却不能阻止外层 .pvv 文件夹误删、物理故障、损坏或整盘丢失。软件垃圾箱可处理部分文件级误操作，清空后则失去该层保护；它不是独立备份。恢复密钥可帮助重获完整库的访问权，不能重建缺失对象。
Pick a destination with a clear purpose按风险选择备份位置
A second location on the same bound external drive can help with deletion of the working vault, but the same physical failure can destroy both. A separate directly attached external drive is safer against single-drive loss. Current local validation covers a synthetic same-drive backup and restoration; another physical backup drive has not yet been tested. Do not interpret a supported path selector as proof that every hardware combination has passed.同一外接盘的另一个位置可防部分工作库误删，但同盘故障仍可能同时损坏两份。另一块直连外接盘对单盘丢失更稳妥。当前本机验证覆盖同盘合成库备份与恢复，另一块实体备份盘仍未实测。支持选择路径不代表所有硬件组合均已验收。
Understand safe exit理解安全退出
The latest local MSIX patch updates one fixed latest encrypted backup, copies changed objects and skips unchanged ones. It is a latest-state copy, not unlimited version history. Failed or interrupted work must not mark the backup successful or replace the last verified state. If the backup destination is missing or fails, the app saves and locks, keeps the warning visible and lets you explicitly skip backup to exit. The seven-day reminder is not evidence that a backup exists.最新本机 MSIX 补丁使用固定一份最新加密备份，复制有变化的对象、跳过未变化项。它是最新状态副本，不是无限历史版本。失败或中断不能标记成功或替换最后确认状态。备份目标缺失或失败时，软件保存并锁定、保留提示，允许明确选择跳过备份退出。七天提醒不等于已经完成备份。
Test a copy, never your only vault验证副本，不拿唯一库试验
Use synthetic material to practise backup and restore into a separate directory, verify that the restored copy opens, then record the date and destination without exposing passwords or filenames. Keep recovery material separately. Do not automatically synchronize the whole USB workspace: it may include plaintext caches or outside exports. This product currently provides no cloud-upload integration or verified cloud-backup workflow.用合成素材在独立目录练习备份与恢复，确认恢复副本能打开，再记录日期和位置，不暴露密码或文件名。恢复材料另行保管。不要自动同步整个 USB 工作目录，其中可能含明文缓存或库外导出。本产品目前没有云上传集成，也没有已验证的云备份流程。