Add a passkey
A passkey signs you in with your fingerprint, face or screen lock instead of your password, and it is what locks your vault: the key to your secrets is made inside it and never leaves it.
Your vault is open in this page. Add a passkey now, so you can open it next time without a recovery code.
With "Use my phone", your computer shows a QR code: scan it with your phone's camera and confirm on the phone. The passkey then lives on your phone, and you use the same QR code whenever you open the vault on this computer.
The passkeys you have can sign you in, but none of them can lock a vault. Add one that can, or .
That passkey can sign you in, but it cannot lock your vault
Some password managers (NordPass, for example) and older versions of Windows Hello make passkeys without the part that keeps an encryption key. That is decided when a passkey is made and cannot be added later, so trying the same one again will not help.
Your phone almost certainly can. Choose "Use my phone", and when your computer shows a QR code, scan it with your phone's camera. If your password manager pops up first, close it or pick "another device" in it.
Lock your vault with your passkey
One more touch of your passkey makes your vault's key. Then you get your recovery codes.
Open your vault to make your recovery codes
Each recovery code is also a key to your vault, so the vault has to be open while they are made.
Or use the single recovery code you were given before. It stops working once your new codes are made.
Cannot open it right now? , and make new ones that open the vault from the Vault page once you can.
Write down your recovery codes
If you lose your passkey, one of these gets you back in. Each works once. Write them on paper or print them, and keep them somewhere safe. Do not take a screenshot or paste them into a chat: anyone who sees one can start recovering your account.
Engram recovery codes for
Using a code never works at once: it starts a wait of hours while you are told by email and on your devices, so you can stop anybody else who has one. These codes will not be shown again.
Check that you kept them
Type code number from your list. It counts as used afterwards, so you will cross it off and have left.
Use a recovery code
This starts a waiting period of . We email you and tell your other devices straight away, so if it was not you, it can be cancelled from anywhere you are signed in. After the wait, come back here and type the same code again to get in.
The code is used up as soon as you start, even if the recovery is cancelled. Back to sign in
Recovery started
You can finish it from . We have emailed the account's address and notified its devices. Come back to this page then (on any device) and type the same code again. Keep the code: you need it once more.
Finish your recovery
Type the same recovery code you started with.