Forgetting your master password is the one problem a zero-knowledge password manager cannot fix for you, and that is deliberate. This guide explains why, what you can do right now, and how to make sure it never costs you your vault.
Why there is no reset
In a zero-knowledge design, your vault is locked with a key made from your master password on your device. The company never has that key. If there were a "forgot password" button that brought your data back, it would mean the company could open your vault, and so could anyone who tricked or breached the company. No reset is the price of real privacy.
If you have already forgotten it
- Do not lock anything that is still open. If the web vault, the Windows app or the browser extension is currently unlocked, keep it open. While it is unlocked you can export your logins (menu, Import and Export), then create a new vault with a new master password and import them. Delete the exported file afterwards, because it is readable.
- Try your likely variations. Different capital letters, an old phone number, a previous year. Slow down: the key method is deliberately slow, so each attempt takes a moment.
- Look for your Recovery Kit. It was offered when you signed up. Check your downloads, your email and anywhere you keep documents.
- Look for an encrypted backup. It is useful only if you know the master password it was made with, but an older password you remember may open an older backup.
- If nothing works, you will need to start a new vault. Your old data cannot be opened by anyone, which is also how it stays safe. Contact us and we will help you start again cleanly.
How to make sure it never happens
- Use a memorable passphrase. A long phrase of random words is both strong and easy to remember. See how to make a strong password.
- Keep your Recovery Kit offline. Print it or save it on a USB stick, and put it somewhere safe at home. Do not keep it in the same place as your devices.
- Export an encrypted backup now and then. The Windows app can also make a daily encrypted backup to a folder you choose.
- Set up emergency access (Personal plans and above). Name someone you trust who can request access if something happens to you.
- Use PIN or fingerprint unlock for convenience, but keep the master password written down at least once, safely.
Why we do not make this easier. Every easier option (a reset link, a security question, a support agent who can "unlock" your account) is also a way in for an attacker. We would rather make you do five minutes of preparation than hold a key to your life.
For the full picture of what we can and cannot see, read what is a zero-knowledge password manager. To compare how other managers handle recovery, see our comparison.
Questions people ask
No. We never receive your master password or the key made from it, so there is nothing to reset it from. That is what keeps your vault private from everyone, including us.
A Recovery Kit is a document you receive when you sign up. It lets you get back into your vault if you forget your master password. Store it somewhere safe, offline, and separate from your devices.
If another device or the browser extension is still unlocked, keep it open. While it is unlocked you can export your logins (menu, Import and Export), then start a new vault with a new master password and import them. Do that before anything locks.