Support
How can we help?
Most answers are below. For anything else, write to us.
Phone backups don’t include Card Box
To keep your cards private, Card Box is left out of Google and iCloud phone backups. Deleting the app, resetting the phone or moving to a new one without a backup file loses your cards. Make one in Settings → Backup and restore, and keep it somewhere other than your phone.
Email us
We reply within 24 hours. Please don’t send card numbers, PINs or other card details.
Common questions
I forgot my master password.+
It can't be recovered or reset, by design: nobody has a copy, not even us. Without it, the vault and its backups can't be opened. You can delete the app and start a new vault.
How do I move my cards to a new phone?+
On the old phone: Settings → Backup and restore → Make a backup, and send it to Google Drive, OneDrive or another place you can reach from the new phone.
On the new phone: install the app, choose "Restore from a backup", pick the file and enter the master password you had when you made it. Backups work between Android and iPhone.
My phone was lost or stolen.+
Your cards stay locked. The vault is encrypted, and the phone's PIN, pattern or passcode can't open Card Box: only your master password, or a fingerprint or face saved on the phone, can.
Block your cards with your banks. If you have a backup, restore it on another phone first and use Lost wallet to go through every card. Then lock or erase the lost phone with Google's Find My Device or Apple's Find My.
On your new phone, install Card Box and choose "Restore from a backup". Without a backup file, the cards can't be recovered.
Someone knows my phone's PIN, or added a fingerprint. Can they open Card Box?+
The PIN alone isn't enough: Card Box never accepts the phone's PIN, pattern or passcode. If a new fingerprint or face is added to the phone, quick unlock turns off and Card Box asks for your master password.
If you didn't add that fingerprint or face, remove the unknown ones in your phone's settings before turning quick unlock back on. Any fingerprint or face saved on the phone can open Card Box, so keep only your own.
I changed my master password. Do my old backups still open?+
Yes, but only with the old password: a backup keeps the password it was made with. After changing it, make a new backup, and delete the old ones unless you keep the old password somewhere safe.
Google Drive isn't in the list when I restore on iPhone.+
Install the Google Drive app and sign in. Then open the Files app → Browse → ••• → Edit, and turn on Google Drive. It then appears whenever Card Box asks for a file.
I can't find my backup in OneDrive or Dropbox when restoring on Android.+
Open the OneDrive or Dropbox app first and download the backup file to the phone, then pick it from Downloads.
Does Lifetime move to my new phone?+
Lifetime belongs to the Google account or Apple ID that bought it. On a new phone signed in to the same account, open Settings → Lifetime → Restore purchase. A purchase on Android doesn't unlock the iPhone app, or the reverse.
How do I get a refund?+
Lifetime is sold by Google Play, so refunds go through Google. Within 48 hours of buying, open play.google.com/store/account/orderhistory, find the Card Box Lifetime purchase and choose Request a refund. After 48 hours, write to us with the order number (it starts with GPA.).
Once the refund goes through, Card Box goes back to the free version. Your cards stay.
Why can't I take a screenshot of my cards?+
Card details are protected from screenshots and screen recording on purpose, so they can't end up in your photo gallery or a cloud backup.
Why are the CVV and the full number hidden?+
The CVV, PIN, full card number and the card photos are shown only after a fresh fingerprint or Face ID check, for 10 seconds. You can still copy the number without showing it.
Is my data sent anywhere?+
No. Card Box has no internet access and collects no data. Only you decide where a backup file goes.
Where should I get Card Box?+
Only from Google Play (and the App Store once it's there). Copies from other websites may have been changed to steal your cards, so never enter your master password in one. Card Box never asks for card details by email or message.
Card Box's own accounts are treepisode.cardbox on Instagram and @treepisode.cardbox on YouTube, and its maker posts as @treepisode. Anyone else using the Card Box name isn't us.
What if Treepisode stops making Card Box?+
Card Box keeps working. It needs no server and no account, so there's nothing to switch off. Lifetime is remembered on your phone, and your backups keep opening with your master password.
I found a security problem.+
Thank you. Write to support@treepisode.com with "Security" in the subject, and please don't include real card details. We reply within 24 hours.
How your data is handled: privacy policy.