With most encrypted vaults, forgetting your password means the data is gone — there is genuinely no way in, and the honest apps tell you so up front. Kistvault is built differently: if you forget your password and your pattern, a printed Recovery Kit opens the vault on a clean device. So the real answer depends on what you still have. Work through the list below in order.
Try these, in order
- Your pattern, if you set one. A vault can be unlocked by a password or an unlock pattern. If the password has slipped your mind but the pattern is muscle memory, start there — it opens the same vault.
- A device you've already paired. If you set up the vault on a second phone or tablet, that device can already open it. Unlock it there, then reset your password or pattern from inside.
- Your Recovery Kit. The printed sheet carries a 256-bit secret that opens the vault on any clean device — enter the code, and you're back in. Its built-in checksum catches a mistyped group before any decryption attempt, so you're told "group 3 is off", not just "wrong key".
- Slow down and rule out a typo. Before you conclude the password is truly lost, check the obvious: caps lock, a trailing space, the wrong keyboard language, or a lookalike character. Key derivation is deliberately slow, so each wrong attempt takes a moment — it's worth being deliberate.
Why most vaults say "you're out of luck"
It isn't laziness — it's the math. A properly private vault is zero-knowledge: the company that makes it holds no key and literally cannot read your files. The upside is that a breach or a subpoena can't expose data the vendor never had the ability to read. The downside is the mirror image: if the vendor holds no key, the vendor can't reset your password either. That's why so many honest vault apps are blunt that, if you forget your password, there's no way to recover anything. For their design, that statement is simply true.
Kistvault keeps the zero-knowledge part and closes the gap a different way — not by holding a key for you, but by printing one that only you keep.
The key idea
A Recovery Kit isn't a backdoor. A backdoor is a key the company holds. The Kit is a copy of your key, in your custody, generated on your device and never seen by us. You keep a way back in, and no one else gains one. That's how a vault can be recoverable without the maker being able to read it.
The one case nothing can fix
If you've forgotten your password and your pattern, lost every paired device, and lost (or never printed) your Recovery Kit, the vault can't be opened — not by you, not by us, not by anyone. There is no master key and no backdoor to fall back on, because building one in would hand the same key to an attacker or a court. That is the same math that keeps everyone else out, working against you. We'd rather state it plainly than pretend a reset button exists.
Make sure it never comes to that
- Print your Recovery Kit the day you make the vault. It's generated on your device and shown once. Print it then — don't screenshot it into a photo library that may sync to a cloud.
- Store it like a passport. A safe, a locked drawer, or a bank box. Anyone who holds the Kit can open that vault, so keep it where only you can reach it.
- Set a pattern as well as a password. Two independent ways in that you're likely to remember beats one you might forget.
- Consider two copies in two places for a vault that matters — balancing "can't lose it" against "can't let it leak".
Questions
Can Kistvault reset my vault password for me?
No. Kistvault runs no server and never holds your key, so there's no password to reset on our side and no account to recover. That's the trade-off of zero-knowledge: no one at Kistvault can read your vault, which also means no one at Kistvault can let you back in. Your way back in is your pattern, a paired device, or your printed Recovery Kit — things only you hold.
I never printed a Recovery Kit. Am I locked out?
Not necessarily. If you still know your password or your pattern, or you have another device already paired to the vault, you can open it and then create a Recovery Kit for next time. The Kit is one of several ways in, not the only one. If the password and pattern are both gone and there's no paired device and no Kit, then the vault can't be opened by anyone, including us.
Is a Recovery Kit a backdoor into my vault?
No. A backdoor is a key someone else holds — a provider key or a master key. A Recovery Kit is a copy of your own key, in your own custody, generated on your device and never seen by Kistvault. It lets you back in without giving anyone else a way in. That distinction is the whole difference between "recoverable" and "the company can read your files".