Skip to main content
Your vault passphrase and Recovery Kit are independent ways to unlock the same vault key.

Vault passphrase

Use the passphrase for normal unlocking. Tuck stretches it with PBKDF2 before using it to unwrap the vault key. It is separate from account sign-in.

Recovery Kit

Your Recovery Kit is created when the vault is provisioned. Use it when you forget the passphrase. Once you are back in, you can set a new passphrase. You can also generate a replacement Recovery Kit from your account’s vault settings. The old recovery code stops working after replacement.
Tuck cannot recover a forgotten vault passphrase without a valid Recovery Kit or another already-unlocked device that can help you rotate access.