Save your recovery code

Your recovery code is the only way back into your encrypted data if you forget your passphrase. Pennyweight shows it once, during setup, so save it before you finish.

This is step 2 of creating your account and passphrase.

What the code looks like

The code is generated in your browser. It starts with pw-, followed by eight groups of six lowercase letters and digits, separated by hyphens. It leaves out characters that are easy to confuse, such as 0, o, 1, l and i, so it's easier to copy by hand.

How to do it

1. On Step 2 of 3 · Recovery, find your code in the box labeled Recovery code.
2. Select Copy code and paste the code into your password manager.
3. Or select Download pennyweight-recovery.txt. The file holds the code, your email address and the time it was generated. You can do both.
4. Tick the box that reads "I understand that if I lose both my passphrase and this recovery file, my data is permanently unrecoverable."
5. Select Finish setup. It stays disabled until you tick the box. The download is optional.

Where to keep it

The downloaded file says to store the code in a password manager or a physically secure location. If you download it, don't leave the file sitting in your downloads folder: it's plain text.

What you'll see

After you copy, the button reads Copied for a moment. After you download, the button changes to Re-download recovery file. Under the checkbox, the wizard says: "We can't reset your passphrase or recover this code for you."

What the code can do

• Reset a forgotten passphrase. On the unlock page, select Use a recovery code instead. Enter your code and choose a new passphrase. See forgot your passphrase.
• Change your passphrase. In Settings, under Security, the passphrase Change button opens the same reset page. You need your recovery code even when you know your passphrase. See change your passphrase.
• Keep working after a reset. Resetting your passphrase doesn't change your recovery code. Your original code stays your backstop.
• Be replaced. If you lose the code or someone else may have seen it, use Regenerate recovery code in Settings, under Security. You confirm your passphrase, get a new code, and the old one stops working. See replace your recovery code.

Good to know

• Typing it back is forgiving. When you enter the code to recover, capital letters and spacing don't matter, and you can leave off the pw-.
• Going back makes a new code. If you select Back on step 2 and continue again, the wizard generates a new code. Save the one on screen when you select Finish setup.
• Lose both, lose the data. If you lose both your passphrase and your recovery code, your data is permanently unrecoverable.
• It doesn't replace your sign-in. You use the code after you sign in, to unlock your data. Your password and two-factor are separate. See turn on two-factor.