SECURITY · 3 NOVEMBER 2026
Why Vaultage cannot reset your vault password
A reset button needs a second key
To reset a password, someone has to be able to open your data without it. That usually means the company keeps a copy of your key, or a way to rebuild it, linked to your email address. Whoever controls that path can open the vault: the company, anyone who breaks into the company, or anyone who gets into your email.
Vaultage keeps no second key
Your vault key is derived from your vault credential and a secret that exists only on your device. Vaultage has no account and no server, so there is nowhere a recovery key could be kept. Nobody can open your vault without your credential, and that includes us.
What protects you instead
- An encrypted backup. Restore it into a new vault with its backup password if you forget the vault password. How to make one.
- A credential you will remember. A long passphrase of a few unrelated words is easier to remember than a short complex password. See PIN vs password vs pattern.
- Writing it down, safely. Keeping the vault or backup password on paper somewhere secure at home is reasonable for most people.
Will the vault erase itself after wrong guesses?
No. After repeated wrong attempts, Vaultage makes you wait, up to an hour between attempts. It never wipes the vault automatically, because then anyone holding your phone could destroy it on purpose.
FAQ
Can Vaultage support recover my vault?
No. We have no access to your vault or its keys. Support can help with everything else.
Is it really impossible to recover?
With a strong password, yes in practice. That is the point. With a six-digit PIN, the device-bound key prevents offline guessing on ordinary copies of the vault, but a password is stronger against forensic attacks.