Master password and recovery
Last updated October 2, 2026
Your master password unlocks your vault and signs you in. It is the only password you need to remember.
Why MoatKey can't reset it
- Your master password never leaves your device. Your device turns it into a key, and that key opens your vault.
- MoatKey's servers only hold encrypted data. We can't read your vault, and there is no master key or "skeleton key" that opens it.
- So nobody at MoatKey can reset your master password or recover your vault for you. Your Emergency Kit is the way back in.
If you forget your master password and lose your Emergency Kit, your vault cannot be opened by anyone, including us. We will never ask you for your master password or Recovery Key.
Choosing a master password
- At least 12 characters.
- Not a common password or a keyboard pattern. MoatKey warns you if it is too easy to guess.
- A passphrase of 5 random words is long, strong and easy to type.
Your Emergency Kit and Recovery Key
You get an Emergency Kit right after you create your vault. It shows your email, your Recovery Key (eight groups of four characters), a Kit ID and the date. The Kit ID is not secret; support can use it to find your kit.
Keep it somewhere safe and offline: printed in a drawer, or as a file you don't sync.
Make a new kit
If you never saved one, or think someone has seen yours:
- Browser extension Open Unlock & security (under Tools). Android app Open Settings → Master password & recovery.
- In Account Recovery Kit, choose Create kit (or Replace kit).
- Enter your Master password and choose Create Emergency Kit.
- Save Your new Emergency Kit. Your previous Recovery Key stops working, so destroy the old one.
If you skipped the kit, MoatKey reminds you with Save an Emergency Kit on the main screen. Choose Set it up.
Forgot your master password?
- On the sign-in screen, choose Forgot master password?
- Enter your email and choose Email me a code. Type the code into Code from the email and choose Continue.
- On Enter your Recovery Key, type the Recovery Key from your Emergency Kit. Capitals, spaces and dashes don't matter. Choose Continue.
- On Choose a new master password, enter it twice and choose Reset master password.
- You get a New Emergency Kit. Save it: your old Recovery Key no longer works. Then choose Open my vault.
If your account never saved a Recovery Kit, MoatKey shows No Recovery Kit. Without the master password, the vault cannot be opened another way.
Change your master password
- Browser extension Tools → Unlock & security. Android app Settings → Master password & recovery.
- In Master password, fill in Current master password, New master password and Confirm new master password.
- Choose Change master password.
Changing it signs your other devices out (within about an hour), locks MoatKey on this device until you unlock with the new one, and turns quick unlock off.