What is a master password?
A master password is the one secret that unlocks a password manager. In a vaulted manager it decrypts the stored vault; in a deterministic manager it is an input to the calculation that recreates every other password. Either way, it is the only password you have to remember, and losing it is usually unrecoverable.
- Topic
- Passwords
- Also called
- master key, primary password
- Reading time
- 1 min
- Reviewed
On this page
What makes a good master password
It has to be strong enough to resist an offline attack and memorable enough that you will never forget it. Those requirements pull in opposite directions. A six-word random passphrase resolves the tension, giving roughly 62 bits in a form the human brain can hold.
It must also be unique. A master password reused anywhere else means one unrelated breach exposes everything.
Why you usually cannot recover it
In a zero-knowledge design, the provider never receives your master password in any usable form, so there is nothing for support to reset. This is a deliberate property, not an oversight: if a provider could reset it, so could anyone who compromised the provider.
What people often get wrong
"My password manager can email me a reset link if I forget it."
Some offer emergency access or recovery codes you set up in advance, but no zero-knowledge manager can recover the master password itself. If it could, its encryption would be reversible by the provider.
Sources
These primary references support the terminology and current security guidance used in this definition.
