Account Recovery

When You See This Screen

The Account Recovery screen appears when you tap "Forgot Password?" on the Unlock screen. It's a two-step process to regain access to your vault using your recovery key.

---

Step 1: Enter Your Recovery Key

What You See

• A key icon at the top
• The heading "Enter Recovery Key"
• An explanation: "Enter the recovery key you saved when you created your vault."
• A Recovery Key text field in monospace font with a placeholder showing the expected format: XXXX-XXXX-XXXX-XXXX-XXXX-XXXX
• A "Verify Recovery Key" button

How to Recover

1. Enter your recovery key (the one you saved when you first created your vault)
2. The key should be at least 24 characters (excluding dashes)
3. Tap "Verify Recovery Key"
4. The app verifies the key against your vault

If the key is correct: You proceed to Step 2.

If the key is wrong: An error message appears: "Invalid recovery key. Please check and try again."

If you enter wrong keys too many times: A rate limit may temporarily block further attempts.

If You've Lost Both Your Password and Recovery Key

At the bottom of the screen, a section appears:

• "Forgot your recovery key as well?"
• An explanation that the vault cannot be recovered without either the password or recovery key
• A "Delete vault and start fresh" button (red)

Tapping this button shows a permanent deletion warning:

• "You've lost both your master password and recovery key. This vault cannot be recovered."
• "Deleting the vault will permanently erase all stored passwords, notes, cards, and documents from this device and the cloud."
• "This action cannot be undone."
• "Cancel" and "Yes, delete vault" buttons

If you confirm, all data is permanently destroyed and you can start fresh with a new vault.

---

Step 2: Set a New Master Password

What You See

After your recovery key is verified, the screen changes to show:

• A shield icon at the top
• The heading "Set New Password"
• A New Master Password field (with visibility toggle)
• A Password Strength Bar that updates in real time
• Password requirement indicators showing which requirements are met/unmet
• A Confirm New Password field (with visibility toggle)
• A "Reset Password" button

How to Set Your New Password

1. Enter a new master password meeting all requirements:
   • At least 12 characters
   • At least one uppercase letter (A-Z)
   • At least one lowercase letter (a-z)
   • At least one number (0-9)
   • At least one special character
2. Confirm the password by entering it again
3. Tap "Reset Password"
4. The vault is re-encrypted with your new password
5. A new recovery key is generated (you'll be shown the Recovery Key screen again)

After Recovery

• Your vault is accessible with the new master password
• Your old master password no longer works
• A new recovery key is issued — save it immediately (the old one is invalidated)
• If cloud sync is enabled, the updated vault is uploaded to Google Drive

---

Important Notes

• Recovery is only possible with your recovery key — there is no email reset, no security questions, and no way for the developers to recover your data
• The recovery key was shown exactly once when you created your vault
• After recovery, your vault data is preserved — nothing is lost
• All password fields are cleared from memory when you leave these screens
• The back arrow returns you to the Unlock screen without making any changes