Password manager account recovery — what happens if you lose access

Zero-knowledge password managers have a specific and non-negotiable property: the company cannot reset your master password. If you forget your master password and have no recovery mechanism configured, your vault is permanently inaccessible. There is no exception. The encryption that prevents the company from being compelled to hand over your passwords also prevents them from helping you get back in.

This is not a bug — it is the intended consequence of the architecture. The question is what recovery options exist within those constraints, and which ones you have actually configured before you need them.

Quick answer

You want the most complete recovery options

Bitwarden — emergency access, organisation admin reset, self-hosted recovery control; multiple paths without breaking zero-knowledge

You want emergency access with no requirement for recipient paid plan

Keeper — Next of Kin doesn't require recipient to hold a paid plan; practical for estate planning

You are evaluating managers and want to understand the recovery model first

Configure recovery before you have anything valuable in the vault — every provider's recovery setup is the most important thing to do after the initial install

When it matters

Bitwarden — emergency access (trusted contact, configurable wait period, Premium required for both parties); organisation admin password reset (business plans); offline vault cache (readable after last sync); self-hosted backup (full admin control)
Keeper — Next of Kin emergency access (trusted contact, configurable wait period; recipient does not need paid plan); admin account recovery on Business plans
LastPass — emergency access (Premium, recipient needs paid plan); SMS account recovery; biometric mobile recovery
Dashlane — no native emergency access; Emergency Sheet (manual vault export as documented workaround)
NordPass — no emergency access feature; recovery code provided at setup (must be saved; losing both master password and recovery code is permanent)
Proton Pass — no emergency access as of 2024; recovery phrase provided at setup

When it fails

The scenarios where vault access is permanently lost:

Forgotten master password with no recovery configured — Dashlane, NordPass, and Proton Pass have no trusted-contact emergency access. Losing the master password without a backup is permanent loss
Forgotten master password with no trusted contact — Bitwarden and Keeper's emergency access requires prior configuration of a trusted contact who is reachable. No prior setup means no recovery path
Recovery code lost alongside master password — NordPass and Proton Pass provide a recovery phrase at setup. Losing both is permanent. Store the recovery phrase securely, not in the vault
Trusted contact is also inaccessible — if the emergency access contact is also unavailable (deceased, unreachable), the backup path is closed

How providers fit

Bitwarden provides the most complete recovery ecosystem: emergency access for trusted contacts, organisation admin reset for business plans, offline vault cache for last-sync access, and self-hosting for users who want full control over the recovery architecture. Configure emergency access immediately after setup.

Keeper provides the most practical emergency access implementation for households: Next of Kin does not require the recipient to hold a paid plan, which removes a real-world barrier in family estate planning contexts.

For Dashlane, NordPass, and Proton Pass — which lack trusted-contact emergency access — the recovery strategy is the recovery phrase/code provided at setup. Store it in a sealed envelope in a safe or with a solicitor. Losing both the master password and the recovery phrase is permanent and has no remedy.

Bottom line

Set up recovery mechanisms before you have anything valuable in the vault. For providers without emergency access (Dashlane, NordPass, Proton Pass), the recovery phrase is the only non-master-password path — treat it as seriously as the master password itself. Bitwarden and Keeper provide the most complete recovery options; configure emergency access during the first session.

Password managers with emergency access My password manager was breached What zero-knowledge means in practice