Skip to main content

Recovery Vault and Restore Center

How the encrypted Recovery Vault protects every removal, where it is stored, how long items are kept, and what Restore Center can and cannot bring back.

The Recovery Vault is where UniClean puts everything it removes. Nothing is hard-deleted on the first action: items are archived, the archive is verified, and only then are the originals removed. Restore Center is the screen where you bring items back.

01RemoveYou confirm a plan
Encrypted vaultAES-256-GCM, checked before the original is removed
03RestoreOne click in Restore Center
Items are kept 30 days by default (High Risk items 90 days). You can change both periods in Settings.
How the Recovery Vault fits around a removal. Restore depends on the item type and on the vault copy still existing.

How the vault protects an item

  • Each item is archived as a tar, hashed with SHA-256, compressed with zstd and encrypted with AES-256-GCM in 1 MiB authenticated chunks.
  • After writing, UniClean decrypts and decompresses the whole archive and compares the hash and length. If anything differs, the original is never removed.
  • Before a restore, the archive is verified again, so a damaged vault file is never half-extracted over real files.
  • Only what was archived is removed: a file is deleted only if its size and modification time still match the archived copy, and folders are removed only when empty.

Where the vault is stored

The vault lives in %LOCALAPPDATA%\UniClean\vault, outside the application folder, so it survives an update, a reinstall or an uninstall of UniClean itself. In portable mode it lives in UniCleanData\vault next to the executable. The encryption key is a random 256-bit key stored in vault.key and, on Windows, wrapped with DPAPI so it is bound to your Windows user account.

Retention

SettingDefaultRange
Safe and Caution items30 days1 to 3650 days
High Risk items90 days7 to 3650 days
Warning before purge3 days1 to 30 days
Auto-purge expired itemsOnOn or off

An hourly housekeeping check purges expired items and shows a notification before it does. You can extend an item's retention or delete it now from Restore Center.

Restore Center

Restore Center lets you search the vault, see the original path, date, tier and size of each item, restore it with one click, delete it for good, or extend its retention. For files, a restore can rename, overwrite, skip or merge when something already exists at the original path.

What can and cannot be restored

ItemHow it is restoredLimit
Files and foldersExtracted back to the original pathItems past retention or deleted from the vault are gone
Registry keys and valuesImported backApplies only to what was archived
Scheduled tasksRecreated from the saved task XMLThe program they ran must still exist
Services and driversRestored as configuration and packageWindows must restart before they start again
Microsoft Store appsUniClean opens the Store page to reinstallCannot be archived byte-for-byte; Windows removes the app data
MSI programsFiles and registry returnThe Windows Installer cache may be gone; reinstall the program over itself to repair it

If UniClean stops mid-operation

Vault items are created as pending. On the next start, pending items whose originals are all still present are discarded. If something was already removed, the item is finalised and kept with a note. The database runs in WAL mode with full synchronous writes and archives are flushed to disk before verification.

See also: how to undo an uninstall on Windows.

Last updated