Account and security

Lost your password

Sign in with your recovery code and set a new password. How to replace a code you no longer trust, and what is left when both are gone.

Your password and your recovery code are the only two ways into your account, and we don’t have a copy of either. So there is no reset link to send. The recovery code is how you get back in, and this page walks through it.

Sign in with your recovery code

  1. On the sign-in screen, click or tap “Forgot your password? Use a recovery code”.
  2. Enter your username and your recovery code. Take care with characters that look alike, such as 5 and S, 8 and B, or 2 and Z.
  3. Click or tap Sign in with recovery code.

You’re now signed in exactly as if you’d used your password, with the same library. Set a new password next, while the code is in front of you.

Set a new password

In a browser: open Settings → Account and click Change password. Click “I forgot it — use my recovery code”, enter the code and a new password, then click Change password.

In the Android or iOS app: tap the ⋯ menu above your links, then Settings. Tap Account, then Change password. Tap “I forgot it — use my recovery code”, enter the code and a new password, then tap Change password.

Changing your password signs out every other device, so each one asks for the new password next time. Your recovery code keeps working.

Replace your recovery code

If the code was kept somewhere someone else could read it, or you’re no longer sure where it is, make a new one:

  1. In Settings → Account, open Recovery code.
  2. Enter your current password, then click or tap Generate new code. The old code stops working at once.
  3. The new code is shown once. Save it, tick the box to say you’ve saved it, then click or tap Done.

Replacing the code stops the old one opening your account from now on. It doesn’t sign anyone out: if you think someone has already used it, also change your password, which signs out every other device. Neither can take back what a device has already downloaded.

Keep it somewhere other than where your password is — printed and filed, for example — so one mishap can’t take both.

If you skipped the recovery code when you created your account, the same screen sets one up. It’s worth doing now, while you still have your password.

If the password and the code are both gone

Then there is no way back into your account, and we can’t make one: your library is encrypted with a key that only those two unlock.

One thing may still help. If a device is still signed in — a browser you haven’t signed out of, or the app on your phone — your library is readable there. Export it from that device as a Bracemark backup, then create a new account and import the backup into it. Unlock any locked lists before you export, since an export leaves them out. The old account can’t be deleted without its password; Delete your account says what happens to it.