Skip to main content
Your vault passphrase and Recovery Kit are independent ways to unlock the same vault key.

Vault passphrase

Use the passphrase for normal unlocking. Tuck stretches it with PBKDF2 before using it to unwrap the vault key. It is separate from account sign-in.

Recovery Kit

Your Recovery Kit is created when the vault is provisioned. Use it when you forget the passphrase. Once you’re back in, set a new passphrase:
  1. Open Settings → Vault and choose Change passphrase.
  2. In Current passphrase or recovery code, enter your recovery code.
  3. Enter your new passphrase and save it.
Tuck shows Passphrase updated. once the change has synced. Your other devices then unlock with the new passphrase. You can also generate a replacement Recovery Kit from Settings → Vault. The old recovery code stops working after replacement.
Tuck cannot recover a forgotten vault passphrase without a valid Recovery Kit or another already-unlocked device that can help you rotate access.