SipherMail has two secrets that behave differently.
| Secret | Can it be reset |
|---|---|
| Login password | Yes |
| Encryption passphrase (for end-to-end encryption) | No |
If you forget your encryption passphrase, nobody, including SipherMail, can recover it. Encrypted messages stay locked.
Reset a forgotten login password#
- On the sign-in page choose the forgot password link.
- Pick a method: Email Link, Recovery Code or Passkey.
- Follow the steps and choose a new password.
Add a recovery email#
A recovery email is an outside address used only for account-recovery instructions and security checks. It is never used for marketing or for signing in.
- Go to Settings > Security & 2FA and open the 2FA / MFA tab.
- In Recovery email, choose Add recovery email.
- Enter the address and choose Send code.
- Enter the 6-digit code and choose Verify code.
You can Change or Remove it later. If the code does not arrive, use Resend code after the short wait.
Recovery codes#
Recovery codes let you reset your password if you lose access to your email.
- On the same tab, find Recovery Codes.
- Choose Generate Recovery Codes.
- Save the codes when they appear. They are not shown again and each works once.
Regenerate Codes replaces the old set. You confirm with your password or an authenticator code first.
Keep your passphrase safe#
Store your encryption passphrase in a password manager. On iPhone and Android, auto-setup keeps it in the device keychain and gives you a recovery code to save.