Skip to content

Changing your encryption password

Changing the encryption password does not re-encrypt every stored record. The unlocked app protects the same data key with the new password-derived key, while the separate recovery-wrapped form remains valid.

  1. Open Settings → Change Encryption Password.
  2. Enter and confirm a new encryption password between 8 and 128 characters.
  3. Tap Send.
  4. On Verify Encryption Password Change, enter the code sent to the account email and tap Verify.

The plaintext encryption password is used for account verification over authenticated TLS and for local key derivation. Maestra does not store it and never receives the unwrapped data key.

The existing recovery key continues to work. No replacement recovery key is created by this flow.