Your email confirms it's you
Recovery also needs a code sent to your email, so someone who finds your Emergency Kit alone can't use it from afar.
Recovery that doesn't weaken encryption
Vallkey can't reset your password: it never knows it. Instead you keep a recovery code, and families can help each other back in, without anyone, Vallkey included, being able to read your vault.

How it works
Set one up in Account and print your Emergency Kit, with your Secret Key and the code.
If you forget your master password, enter the recovery code and a code Vallkey emails you, then choose a new master password.
In a family, the organizer can help a member who lost everything back in, after the member confirms a code on both screens.
The details
Recovery also needs a code sent to your email, so someone who finds your Emergency Kit alone can't use it from afar.
Recovery sets a new master password and a new Secret Key, and signs every device out. Your items, vaults and shares stay as they were.
With a device that's already logged in at hand, a new one needs neither your master password nor your Secret Key typed: you enter a code we email you, then type the code the new device shows on the old one, which hands over what the new one needs, sealed so only that device opens it.
On Premium, a recovery code can be split between three trusted contacts. Any two of them can help you back in, with the code emailed to you, and one alone learns nothing. It's set up in the web vault.
Availability
Make a new one any time from a device that's unlocked. In a family, the organizer can help. Otherwise, no one can open the vault: that's what end-to-end encryption means.
Vallkey opens soon. Join the waitlist to hear first.