Account Recovery in ZZPass

🔑 Why Recovery is Different

Zero-Knowledge Security
ZZPass uses end-to-end encryption, meaning your passwords are encrypted on your device before syncing. Your primary password never leaves your device, and we have no way to decrypt your data without it.

No Traditional Password Reset
Unlike typical online services, ZZPass cannot send you a "reset password" email that gives you access to your account. This is by design - it ensures that nobody, including ZZPass employees, can access your encrypted passwords.

→ Learn about end-to-end encryption

🛟 Your Recovery Key

What is a Recovery Key?
Your recovery key is a long, cryptographically secure string generated when you create your ZZPass account. It's the only way to regain access to your vault if you forget your primary password.

Format: A 32-character code like:
ABCD-EFGH-IJKL-MNOP-QRST-UVWX-YZ12

Your recovery key is generated locally on your device and is derived from your primary password using advanced cryptographic techniques (PBKDF2).

⚠️ Critical: Save Your Recovery Key

When You First Set Up ZZPass
You'll be shown your recovery key and prompted to save it. This is your only chance to save this key - we cannot retrieve it for you later.

What Happens if You Lose It?
If you forget your primary password AND you don't have your recovery key, there is no way to recover your account. Your encrypted vault will be permanently inaccessible.

This is not a limitation - it's a security feature. The alternative would be to give someone else (like ZZPass) the ability to access your passwords, which would defeat the purpose of encryption.

📱 On iPhone or iPad

1. Open ZZPass app
2. Tap Settings (gear icon)
3. Tap Account
4. Tap View Recovery Key
5. Authenticate with Face ID, Touch ID, or your primary password
6. Your recovery key will be displayed

Tip: Tap the Copy button to copy your recovery key, or tap Share to save it securely (e.g., to Files, Notes, or another secure location).

💻 On Mac

1. Open ZZPass for Mac
2. Go to ZZPass → Settings (or press ⌘,)
3. Click Account
4. Click View Recovery Key
5. Authenticate with Touch ID or your primary password
6. Your recovery key will be displayed

Tip: Click Copy to Clipboard to copy your recovery key, or use Print to create a physical backup.

📝 During Initial Setup

When you first create your ZZPass account, you'll see a screen displaying your recovery key with options to:

• Copy the key to your clipboard
• Save to Files (iOS) or Save to Finder (macOS)
• Print a physical copy
• Take a screenshot (not recommended for security reasons)

You cannot proceed until you confirm you've saved your recovery key.

Step 1: Access Recovery Mode

On iPhone, iPad, or Mac:

1. Open ZZPass
2. On the unlock screen, tap/click Forgot Password?
3. Select Recover Account with Recovery Key

This will launch the account recovery process.

Step 2: Enter Your Recovery Key

1. Enter your 32-character recovery key
2. The format includes dashes (XXXX-XXXX-XXXX-...)
3. Recovery keys are case-insensitive
4. Tap/click Verify Recovery Key

Note: You have unlimited attempts to enter your recovery key. If the key doesn't work, double-check for typos or missing characters.

Step 3: Set a New Primary Password

Once your recovery key is verified:

1. You'll be prompted to create a new primary password
2. Choose a strong, memorable password (minimum 12 characters)
3. Confirm your new password
4. Tap/click Reset Password

Your vault will be re-encrypted with your new primary password, and you'll regain full access to all your passwords and notes.

✅ Recommended Storage Methods

1. Physical Backup (Most Secure)
Print your recovery key and store it in a secure physical location like a safe, safety deposit box, or locked filing cabinet.

2. Encrypted Cloud Storage
Save your recovery key to an encrypted file in iCloud Drive, Google Drive, or Dropbox. Use a separate password for the encrypted file.

3. Password-Protected Document
Store your recovery key in a password-protected PDF or encrypted note. Use a different password than your ZZPass primary password.

4. Split Storage
Write down the first half in one location and the second half in another location. This way, if one location is compromised, your full key is still safe.

❌ What NOT to Do

Don't store your recovery key in:

• Unencrypted notes on your phone or computer
• Email (even draft emails)
• Text messages or messaging apps
• Screenshots saved to your photo library
• Shared cloud folders
• Browser bookmarks or auto-fill

Don't share your recovery key with:

• Anyone claiming to be from ZZPass support
• Family members (unless you explicitly trust them with full access)
• Tech support or IT departments

🔄 Multiple Copies are OK

Redundancy is Good
It's actually recommended to keep multiple copies of your recovery key in different secure locations. This protects against losing access due to a single point of failure.

Example Strategy:
• One printed copy in your home safe
• One in a safety deposit box
• One encrypted digital copy in cloud storage

Balance Security and Accessibility:
Your recovery key should be secure enough that unauthorized people can't access it, but accessible enough that you can retrieve it when needed.

🧠 Remember Your Primary Password

Use a Memorable Passphrase
Instead of a random password like "xK9#mP2!", use a passphrase like "correct-horse-battery-staple" (but more personal and memorable to you).

Examples of Good Passphrases:
• "BlueSky-CoffeeMug-2024-Sunshine"
• "MyDog-Loves-ChaseSquirrels"
• "Pizza-Friday-Movie-Night"

Make it long (12+ characters), personal, and easy for you to remember but hard for others to guess.

🔐 Use Biometric Unlock

Enable Face ID or Touch ID
On iPhone, iPad, and Mac, you can unlock ZZPass with biometrics so you don't need to type your primary password every time.

Important: Biometric unlock doesn't replace your primary password - it's just a convenience feature. You'll still need your primary password for certain operations like:

• Viewing your recovery key
• Exporting your vault
• Changing account settings
• After device restart

Using biometrics regularly means you won't forget your primary password from lack of use.

✍️ Practice Entering Your Password

Regularly Type Your Password
Even if you use biometric unlock, periodically practice typing your primary password to maintain muscle memory.

Test Recovery Key Access
Every few months, go to Settings → Account → View Recovery Key and verify you can retrieve it. This ensures you know where it's stored and can access it when needed.

Review Your Storage Method
Make sure your recovery key storage location is still valid:
• Physical copy still in safe?
• Cloud file still accessible?
• Password for encrypted file still remembered?

Can I change my recovery key?

No. Your recovery key is mathematically derived from your primary password using cryptographic techniques. It cannot be changed without changing your primary password.

If you change your primary password through normal means (not recovery), a new recovery key will be generated. You'll need to save this new key.

How long is my recovery key valid?

Forever. Your recovery key remains valid until you change your primary password. Even if you don't use ZZPass for years, your recovery key will still work.

However, if you change your primary password (either through normal password change or through account recovery), a new recovery key will be generated and your old key will no longer work.

What if someone steals my recovery key?

If someone obtains your recovery key, they can use it to reset your primary password and gain access to your vault. This is why it's critical to store your recovery key securely.

If you believe your recovery key has been compromised:
1. Log in to ZZPass with your current primary password
2. Change your primary password immediately
3. Save your new recovery key
4. The old recovery key will no longer work

Can I use account recovery on a different device?

Yes. You can use your recovery key to regain access on any device where ZZPass is installed. The recovery process works the same way on iPhone, iPad, and Mac.

Once you've recovered your account and set a new primary password, your vault will sync to all your devices via iCloud (if enabled).

Is my recovery key backed up to iCloud?

No. Your recovery key is never synced to iCloud or any other cloud service. It exists only:
• On the device where you created your account
• In the locations where you manually saved it

This is for security - if your recovery key were automatically backed up, it could potentially be compromised if your iCloud account were hacked.

Do I need my recovery key to add a new device?

No. You don't need your recovery key to sign in to ZZPass on a new device. You only need your recovery key if you've forgotten your primary password.

To add a new device:
1. Install ZZPass on the new device
2. Choose Sign In to Existing Account
3. Enter your primary password
4. Your vault will sync via iCloud