Why are the account password and Master key separate?
The account password authenticates your account. The Master key encrypts and decrypts vault contents in the browser. Resetting one does not replace the other.
Read related guidanceVelora Vault help
Search concise answers about setup, unlocking, recovery, storage, importing, and billing.
Your help search stays in this browser.
Browse by topic
Create an account, confirm your email, and complete vault setup.
Understand the Master key, hint, PIN, biometrics, and reset boundaries.
Create, organize, assess, and safely reveal password records.
Upload, label, search, preview, and remove protected files.
Keep cards, bank accounts, and login credentials in the right record types.
Review extraction privacy, usage limits, candidates, and saving.
Store SSH keys, crypto passphrases, API credentials, WiFi passwords, and 2FA backup codes.
Quick answers
10 answers found
The account password authenticates your account. The Master key encrypts and decrypts vault contents in the browser. Resetting one does not replace the other.
Read related guidanceRetrieve the optional hint from the authenticated account. The hint may help you remember, but Velora cannot reveal, reset, or recover the key for existing encrypted contents.
Read related guidanceReadable key material is cleared from the active vault session. Enter the Master key again, or use an enrolled account-bound local unlock method, to reopen it.
Read related guidanceYes. Settings > Security includes a Change master password flow that decrypts your whole vault with the current Master key and re-encrypts it under a new one in one atomic step. It requires the current key, so it's a change, not a recovery.
Read related guidanceYes. Settings > Security lists each active session by device, so you can sign out just the one you don't recognize instead of every device at once.
Read related guidanceYes. Supported document contents are encrypted in the browser before encrypted bytes are sent to private object storage.
Read related guidanceA banking username and password belong in Passwords. Account number, IFSC or routing code, and account holder details belong in Bank vault.
Read related guidanceNo. Assisted extraction creates candidates. Review and edit them, then approve only the records you want to encrypt and save.
Read related guidanceNo. Content you explicitly submit is sent to the configured AI provider for extraction. Submit only data you are permitted to process.
Read related guidanceThe pricing page lists current record, storage, import, and support limits for both plans.
Read related guidanceCritical recovery note
An account password reset can restore sign-in. It cannot decrypt contents protected by a different or forgotten Master key. Keep a protected offline copy outside the vault it unlocks.
Understand the security boundaryStill need help
Include the page, action, and visible error. Never send passwords, Master keys, PINs, CVVs, or full financial details.