Email + master password. Everything is decrypted on this device.
Your master password is never sent to the server and cannot be reset without your recovery code.
This is shown once. It's the only way to recover your vault if you forget your master password. We never store it.
Re-encrypts your vault key under a new password. Your recovery code keeps working.
Scan with an authenticator app (Google Authenticator, Aegis, …), then enter a code to confirm.
Choose a 4–8 digit PIN (6 recommended). It encrypts your vault key locally — the PIN itself is never stored.
Quick unlock is on for this device. Disabling erases the encrypted PIN block immediately.
Generate a fresh recovery code. Your previous code stops working immediately. We never store the code itself.