What happens if I forget my password manager master password?

Why there is usually no reset, the four recovery routes worth trying in order, and the arrangement to set up now so this never becomes an emergency.

Difficulty: beginner
Time: 20 min
Read: 3 min
Safety: warning

Short answer

Try the recovery route your provider offers before anything else: an emergency kit or recovery code, biometric unlock on a device still signed in, an account recovery option if you enabled one, or a family or organisation administrator who can reset it. If none of those exist, the vault cannot be recovered and you rebuild by resetting passwords account by account from your email.

Password managers are deliberately built so the provider cannot help you. That is the point — if they could open your vault, so could anyone who compromised them. It makes the master password the one credential that genuinely must not be lost, and it makes the recovery arrangement something to set up on day one.

Safety

In most reputable managers there is no reset. The provider cannot decrypt your vault because they never had the key, which is exactly the property that makes the product safe. If you have no recovery kit and no signed-in device, the vault is unrecoverable — so set up the recovery route today, before you need it.

Step by step

Look for the emergency kit or recovery code.Several managers issue a printed recovery sheet or a long recovery key at setup. Check the drawer, the folder with your passport, and anywhere you keep important paper. This is the route that works.
Check every device that may still be unlocked.A phone, tablet or browser where the manager is still signed in and unlocks with a fingerprint or face is a live copy of the vault. Do not sign out of it. Export the vault from there immediately.
Export before you do anything else.If you have access on any device, export the vault to an encrypted file or a printed copy right now, then deal with the master password afterwards. Access can end with an update or a session expiry.
Check for an account recovery option you enabled.Some managers offer optional recovery — a trusted contact, a recovery contact, a device-based recovery, or a biometric recovery on a registered device. These only work if they were switched on beforehand.
Ask the administrator if it is a family or work account.Family plans and business plans usually give an organiser or administrator the ability to trigger a recovery for a member. This does not apply to a standalone personal account.
If none of that works, accept the rebuild and start from email.Regain access to your email account first, since it is the reset route for everything else. Then work through your accounts in priority order using each site's forgotten-password process, resetting and storing each in a new vault.
Use the rebuild to prune.You will discover accounts you had forgotten. Delete the ones you do not want rather than recreating them, and note which ones held payment details.
Set the recovery up properly this time.New master password, four or five random words. Print the emergency kit. Store one copy at home and one elsewhere. Turn on any recovery option the manager offers, and turn on two-factor for the manager account.

Tips

Write the master password down once, on paper, and keep it where you keep your passport. The risk of a burglar finding it is far smaller than the risk of you forgetting it.
A password hint you set yourself is often enough to jog it. Check whether your manager stores one and whether you can view it from a signed-in device.
If you are close to remembering it, try variations methodically and write down what you have tried. Many managers throttle attempts but do not lock the vault permanently.

Common mistakes

Signing out of a device that still works — That session may be the only remaining access to the vault. Export first, always.
Reinstalling the app hoping to reset it — It clears the local cache and can destroy the one copy you could still open.
Choosing a master password you cannot remember without a hint — Random words you can picture beat a complex string you will forget. Memorability is a security property here.

Questions people ask

Can the provider reset it for me?

In a properly designed manager, no. They never held the key. Providers that can reset your vault can also read it, which is a worse trade.

What about biometric unlock — does that bypass the master password?

It unlocks a locally stored key on a device that is already set up. It works only where the manager is already signed in, which is why an unlocked device is the best recovery route.

Will I lose passkeys stored in the vault too?

Yes, if the vault is unrecoverable. Every account with a passkey stored there needs its own recovery route, which is another reason to keep an alternative sign-in method on important accounts.