Change a vault password

What you'll do: Change the password on a vault (or a Shadow Layer), or reset it if you've forgotten it.

Why it matters: The vault password is cryptographic — it's part of what unlocks your files. Changing it re-secures the vault; resetting it is your safety net if you forget.

Change the password (you know the current one)

  1. Open the vault's actions (context menu / vault detail).

  2. Choose Change password and enter the current password.

  3. Set and confirm the new password.

  4. The vault is re-keyed. A new Vault Recovery Key may be issued — save it, and discard the old one.

Reset the password (you forgot it)

  1. Choose Recovery / Reset password for the vault.

  2. Provide that vault's Vault Recovery Key.

  3. The reset follows the vault's key-storage choice:

    • Security (stored key) vaults reset with the vault key.

    • Convenience (no stored key) vaults reset with your User Key alone.

  4. For a vault with Shadow Layers, each layer can show a few sample file/folder names during reset so you pick the right layer.

  5. Set a new password and save the new recovery key.

Common mistakes

  • Changing a password with sync off. Other devices won't get the new key. Enable sync so the change propagates.

  • Not updating your records. After a reset, your old "which password opens which layer" note is stale — update it.

  • Losing the recovery key before you need it. Without it, a forgotten password is unrecoverable.

Changing a password re-keys data; a follow-up key rotation may be prompted — see Rotate keys.

Last updated