> For the complete documentation index, see [llms.txt](https://docs.gotempest.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.gotempest.app/accounts-vaults-and-privacy/resetting-password.md).

# Passwords & Recovery — Account Sign-in and Master Password

Distinguish account sign-in from the vault Master Password, change the current v3 password, and preserve remaining access when a password is lost.

Tempest separates **account sign-in** from **vault decryption**. Signing in authorizes account access; unlocking supplies the key material needed to read encrypted data. A successful sign-in or account-password reset does not by itself unlock a vault.

For current v3 encryption, the **Master Password** protects the account's private key. That private key opens vault keys wrapped for the account. It is not a separate password for every v3 shared vault. Legacy v1/v2 shared vaults may still require a passphrase supplied by the owner.

See [End-to-End Encryption](/accounts-vaults-and-privacy/end-to-end-encryption.md) for the current key chain.

## Reset account sign-in

Use the **Forgot password** flow on the sign-in page of the server your account belongs to. Tempest Cloud and self-hosted deployments have separate accounts; use the intended server. The Cloud account recovery page is [Reset password](https://gotempest.app/users/password/new).

This restores authentication access. It does not replace a missing Master Password, decrypt old content or give the server a plaintext vault key.

## Change the Master Password when you know it

1. Select the correct account.
2. Open **Settings → Account → Change Master Password**.
3. Enter the current Master Password and the new one, then save.
4. Use the new password when unlocking the account on another device.

In **v3**, this decrypts and re-wraps the account private key under the new password. The vault key stays the same and document bodies do not need to be re-encrypted. Legacy vaults use their compatible password-change flow.

Changing a password does not revoke already copied vault keys or plaintext. If credentials were exposed, rotate those credentials and review device/member access as well.

## If you forgot the Master Password

First check whether you still have a **trusted, unlocked device** with the data you need. Preserve or export essential data there before signing out, removing an account, clearing app storage or deleting a keyring entry. These actions can remove remaining keys/access. Exported plaintext must be protected separately.

Tempest support cannot decrypt the encrypted private key or vault content without the required key material. Recovery depends on any keys, backups and authorized shared-vault access that still exist; do not assume an account sign-in reset recovers all encrypted data.

If no usable keys remain, a reset/new vault may allow you to start again, but it cannot restore the old encrypted content. Ask support or your self-hosted administrator about the available reset workflow before discarding existing data. Vault History cannot recover content whose decryption key has been lost.

## Local master key problems

The **local host master key** in the OS credential store is different from the Master Password. It seals local account secrets and cached keys. Deleting it on its own can make every account in that local root unreadable. If Tempest reports a missing or inaccessible master key, restore credential-store access or the matching backup rather than creating an unrelated replacement.

See [Where Tempest Stores Your Credentials](/accounts-vaults-and-privacy/where-tempest-stores-credentials.md).

## See also

* [Accounts & Multiple Accounts](/accounts-vaults-and-privacy/accounts-and-vaults.md)
* [How Tempest Protects Your Privacy](/accounts-vaults-and-privacy/how-tempest-protect-your-privacy.md)