By Tim O. · August 16, 2026 · 9 min read

Forgot your master password? What happens next

Last verified: August 16, 2026

Jump to: What to try first · How the big three handle it · NordPass · If the vault is gone

The short answer

If you forgot your master password, most password managers cannot recover the vault. The company cannot look it up. That is the design, not a glitch. A few apps let you create a new master password if you saved a backup code when you signed up. Without that backup, the logins inside are gone.

This is not a punishment for being human. A password manager (an app that stores your logins in one encrypted box, called a vault) is built so that nobody at the company can open that box. The master password is the one key. If the company could reset it for you, they could also reset it for someone pretending to be you.

So the honest version is this.

With most password managers, a forgotten master password means the vault cannot be recovered.

What you do next depends on whether you still have a second secret you saved on day one, or a phone that is still unlocked.

What to try before you reset anything

Do not delete the account yet. A reset is often permanent. Spend twenty minutes on these three checks first.

Open every phone, tablet, and computer you use. Look for the password manager app. If it unlocks with a fingerprint, face, or a PIN, leave it open.
Search Downloads, email, and a desk drawer for a PDF or printout named something like Emergency Kit or Recovery Code.
If a device still opens, export your logins to a file you control, then store that file somewhere private. Sessions that unlock with a fingerprint often expire.

A backup you never saved is not a backup.

If none of those three work, read the section for your app below. Then stop. Support chat cannot decrypt the vault for you, even when the person on the other end wants to help.

How the major managers handle this

The pattern is the same. The details are not. I checked NordPass, 1Password, and Bitwarden against their current help pages on August 16, 2026.

Manager	If you saved a backup	If you did not
NordPass	A 24-symbol recovery code lets you set a new master password and keep the vault.	An account reset deletes every saved item. Face or fingerprint unlock can issue a new recovery code only if you already turned that on.
1Password	A recovery code you generated earlier, a printed Emergency Kit, a family organizer, or a team admin can get you back in.	The company cannot reset the password. You start a new account.
Bitwarden	A password hint, a trusted emergency-access contact, or a workplace admin (if that policy is on) may help.	Bitwarden cannot recover the account or its data. You delete it and create a new one.

Work and family plans sometimes add a second person who can recover you. A personal account, used alone, does not get that safety net unless you set it up yourself.

NordPass, from their current docs

NordPass is the one I get asked about most on this site, so I went to their help center rather than going from memory.

If you still have the recovery code

NordPass says you reset the master password with the recovery code, a 24-symbol code they prompted you to save during setup. Their steps, in order:

Open NordPass and choose "Forgot your master password?"
Enter the 24-symbol recovery code.
Choose Continue.
Create a new master password.

That path keeps the vault. It is not NordPass looking up the old password. It is you proving you still have the second secret they gave you on day one.

If you have no recovery code, but the app still unlocks with your face or fingerprint

NordPass documents a separate path. If biometric unlock was already on, you can log in without typing the master password on Windows, macOS, Android, iOS, and the browser extension. From Settings, in the security section, you can reset the recovery code, confirm with face or fingerprint, and save the new code.

That only works if biometrics were already enabled. You cannot turn them on after you are locked out.

If you have neither

NordPass will let you reset the account. Their own article is blunt: that reset deletes all of your NordPass items.

Their current steps:

Open the app, extension, or web vault.
Choose "Forgot your Master Password?" then "Don't have Recovery Code?"
Choose "Get Reset Code." They email a confirmation that is valid for 48 hours.
Open the email, follow the link, and enter your email address and the request ID.

You can cancel the reset from a link in the "NordPass Vault has been reset" email, using that same request ID. After 7 days, NordPass says the reset becomes irreversible.

I would give my own mother the same warning I am giving you: treat that email as a last resort, not a recovery. It gets you back into an empty vault.

NordPass business accounts are different. If you lost both the master password and the recovery code, an organization owner can approve a reset. That does not apply to a personal vault you run yourself.

1Password

1Password's help page is equally direct. The account password is never sent to them, never logged, and never known to them. Nobody there can reset it.

What can still work, if you set it up earlier:

The Emergency Kit PDF, which may have the password written in the password field.
A recovery code you generated on 1Password.com. You use it under "Having trouble signing in?", prove you own the email, and choose a new password. You also get a new Secret Key.
A family organizer or team administrator, who can recover the account for you.
Touch ID, Face ID, Windows Hello, or similar, on a device that is still signed in. 1Password warns that this expires. Export your data while it still works.

If none of those apply, 1Password says you start over.

Bitwarden

Bitwarden uses zero-knowledge encryption. Their help page states they have no way to access, retrieve, or reset the master password.

Worth trying, in this order:

Confirm you are on the right server (US or EU). An account lives in only one region.
Request the master password hint, if you created one. It is emailed. A hint is a reminder, not a bypass.
Ask a trusted emergency-access contact, if you named one.
Ask a workplace admin, if your organization turned on account recovery and enrolled you.
Unlock a phone or browser that is still signed in, then copy your logins out before you delete anything.

If none of those grant access, Bitwarden says there is no way for them to recover the account or its data. You delete the account and create a new one.

If you are still choosing a manager, not recovering one, start with the password manager your mom will actually use if you are buying for a parent. For a side-by-side of NordPass, 1Password, and Bitwarden, see the password manager comparison.

If the vault is gone

You are not starting from zero on the internet. You are starting from email.

Most sites will send a reset link to the address you used to sign up. If you can still open that email inbox, you can rebuild, one site at a time. Begin with:

Email
Banking
The new password manager

Those three unlock almost everything else. For a longer list of which accounts to treat as load-bearing, see the critical five in the strong-password guide.

If the lost vault also held the email password, and you cannot open email either, use the email provider's account recovery. That path is slow and document-heavy. It is still better than guessing.

When you create the new vault, write the new master password on paper and put the paper where only you can reach it. A home safe is enough. A notes app is not. Then turn on two-factor authentication on the manager itself, using an authenticator app rather than a text message. The setup is in the two-factor authentication guide.

If you are locked out of an account because of two-factor codes rather than a master password, that is a different problem. Use the 2FA lockout guide.

How to keep this from happening twice

Pick one of these three, and do it this week while you still remember why it mattered.

Write the master password on paper. Store it with the will, the passport, or the spare house key.
Save the official recovery kit or recovery code as a PDF, then put a copy on a USB drive in the same place as the paper.
Name one trusted person for emergency access, or make a second family member an organizer, following the app's own instructions.

A passphrase of five or six random words is easier to keep than a string of symbols. The strong password guide walks through that. If you are choosing an app for a parent, start with the caregiver buying guide.

Write it down. Keep it off the internet.

Frequently asked questions

Can a password manager recover my vault if I forgot the master password?

Usually no. With most password managers, a forgotten master password means the vault cannot be recovered. The company cannot look it up. A backup code, emergency kit, or a device that is still unlocked is the only way back in, and only if you set that up in advance.

What is a master password?

The one password that unlocks your password manager. Everything else you save (bank logins, email, shopping) sits in an encrypted vault. The master password is the key to that vault.

Can NordPass reset my master password?

Only if you still have the 24-symbol recovery code you were asked to save at signup. That code lets you create a new master password and keep the vault. If you do not have the code, NordPass can reset the account, but that reset deletes every saved item.

Can 1Password or Bitwarden look up my master password?

No. Both companies say they have no copy of it and cannot reset it. 1Password can get you back in with a recovery code you generated earlier, a family organizer, or a team admin. Bitwarden can, if you already set up emergency access or your workplace uses admin recovery. Without those, the vault is gone.

What should I do first if I cannot remember it?

Do not reset the account yet. Check phones, tablets, and computers for an app that is still unlocked. Look for a printed emergency kit, a recovery-code PDF, or a paper copy. If a device still opens, export your logins before that session expires.

If the vault is gone, how do I get back into my other accounts?

Use each site's forgot-password link and the email account those resets go to. That only works if you can still open that email. After you are back in, create a new vault and a new master password you can actually keep.

Sources

Claim	Source
NordPass recovery code is 24 symbols; used on "Forgot your master password?"	NordPass: What if I forgot my NordPass Master Password? (verified August 16, 2026)
Account reset deletes all NordPass items; email code valid 48 hours; cancel within 7 days	NordPass: How to reset NordPass account (verified August 16, 2026)
Biometrics can reset a NordPass recovery code if already enabled	NordPass: Forgot your NordPass Master password and no recovery code? (verified August 16, 2026)
1Password cannot reset the account password; recovery code, family organizer, or still-unlocked device may help	1Password: If you forgot your 1Password account password (page dated May 14, 2026)
Bitwarden cannot access, retrieve, or reset the master password	Bitwarden: Forgot My Master Password (verified August 16, 2026)

Written by Tim O.

I write about password security and everyday account safety at SafePasswordGenerator.net, for people who want practical steps rather than fear for its own sake.