> For the complete documentation index, see [llms.txt](https://docs.gotempest.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.gotempest.app/account-and-privacy/resetting-password.md).

# Reset Your Tempest Password (Sync Account & Vault)

Tempest has **two separate passwords**:

1. **Sync account password** — authenticates you with the Tempest cloud sync service.
2. **Vault password** — encrypts your hosts, keys, and snippets locally before sync. This password never leaves your device, which is why end-to-end encryption works — but it also means **we cannot recover it for you**.

## Reset the sync account password

You can reset this any time at <https://gotempest.app/users/password/new>. You'll need it to sign in on a new device.

## Reset the vault password (you still have access)

If you're already signed in and remember your current vault password:

**Settings → Account → Change Vault Password**

Enter the current password, then set a new one. The vault is re-encrypted in place; no data is lost.

## Vault password lost — recovery options

The vault password is non-recoverable by design. If you've forgotten it, contact support at <https://gotempest.app>. We can wipe the encrypted vault on the server so you can set a new password — **but all previously synced data will be permanently lost** (because we never had the keys to decrypt it).

If you still have a device where Tempest is signed in and unlocked, copy the most important hosts and credentials out manually before triggering the reset.

This is the trade-off of true zero-knowledge end-to-end encryption: see [How Tempest Protects Your Privacy](/account-and-privacy/how-tempest-protect-your-privacy.md) for the cryptographic details.