Change your passphrase

You can switch to a new encryption passphrase at any time. Pennyweight changes it with your recovery code, so have the code from save your recovery code ready before you start.

Before you start

The Change control doesn't ask for your current passphrase. It opens the same reset page used for a forgotten passphrase. That page asks for your recovery code and a new passphrase. It never asks for your current passphrase.

If you can't find your recovery code, replace it first. See if you've lost your recovery code below.

How to do it

1. In the web app, open Settings and select Security.
2. On the Passphrase row, select Change. The row reads "Encrypts everything on your device. We can't reset it — only you can, with your recovery code."
3. On Reset your passphrase, enter your recovery code in Recovery code. Type your new passphrase in New passphrase and again in Confirm new passphrase. It needs at least 12 characters.
4. Select Reset passphrase.
5. Download the reset confirmation, tick the box, and select Sign in. Then unlock with your new passphrase.

Forgot your passphrase? walks through every screen and error message on the reset page.

To leave without changing anything, select Back to Security under the button.

If you've lost your recovery code

While you still know your current passphrase, you can get a new code and then change your passphrase with it:

1. In Settings, under Security, select Regenerate on the Regenerate recovery code row.
2. Enter your current passphrase and select Confirm.
3. Save the new code with Download or Copy. Tick "I've saved this new code." and select Finish. The old code stops working.
4. Follow the steps in how to do it with the new code.

Regenerating checks your current passphrase and needs an unlocked session. Replace your recovery code covers it in full. If you lose both your passphrase and your recovery code, your data is permanently unrecoverable.

What you'll see

While the change runs, the button reads "Rewrapping your keys…". When it finishes, the page reads You're back in. The confirmation file, pennyweight-passphrase-reset.txt, says your encryption keys were rewrapped under the new passphrase and your transactions were not rewritten.

Good to know

• Your recovery code stays the same. Changing your passphrase doesn't issue a new code. Your original code is still your backstop.
• Your old passphrase stops working. After the change, unlock with the new one. This browser's unlocked session is cleared, so you unlock again. See lock vs sign out.
• A failed change changes nothing. The page says "if anything fails midway, your old passphrase still works." Pennyweight saves the new keys in one step, or not at all.
• The rules differ from setup. Account setup rejects a weak passphrase and asks you to "aim for several unrelated words." The reset page only requires 12 characters. Its strength meter is a guide only. Use several unrelated words anyway.