How to reset your Tempest sync account password and your end-to-end-encrypted vault password — and what to do if you've lost the vault password entirely.
Tempest has two separate passwords:
Sync account password — authenticates you with the Tempest cloud sync service.
Vault password — encrypts your hosts, keys, and snippets locally before sync. This password never leaves your device, which is why end-to-end encryption works — but it also means we cannot recover it for you.
You can reset this any time at https://gotempest.app/users/password/new. You'll need it to sign in on a new device.
If you're already signed in and remember your current vault password:
Settings → Account → Change Vault Password
Enter the current password, then set a new one. The vault is re-encrypted in place; no data is lost.
The vault password is non-recoverable by design. If you've forgotten it, contact support at https://gotempest.app. We can wipe the encrypted vault on the server so you can set a new password — but all previously synced data will be permanently lost (because we never had the keys to decrypt it).
If you still have a device where Tempest is signed in and unlocked, copy the most important hosts and credentials out manually before triggering the reset.
This is the trade-off of true zero-knowledge end-to-end encryption: see How Tempest Protects Your Privacy for the cryptographic details.
Last updated
