Skip to content

Password vs recovery passphrase: what each protects

Your password protects access to your account; your recovery passphrase is the safety net that lets you regain access. One can be reset, the other must be kept safe.

These two secrets play very different roles, and confusing them can lead to painful mistakes. This article draws the line clearly: what each one protects, and what can be done when one is lost.

In short

Your password protects access to your account. Your recovery passphrase lets you restore your encrypted files through Everabyte’s secure recovery process when you cannot sign in. A password can be reset or changed; a lost recovery passphrase cannot be reissued by Everabyte.

What your password protects

Your password protects access to your account. It is what authenticates you to the service: signing in, managing settings, using the platform. If your password is compromised, it is control of your account that is at stake — which is why changing it quickly matters.

What your recovery passphrase protects

Your recovery passphrase restores your encrypted files through Everabyte’s secure recovery process. It is a sequence of words you keep offline, separate from your password. Everabyte cannot read it back to you; you are the one who holds it.

What can be reset — and what cannot

Your password can be reset or changed. Your recovery passphrase cannot be reissued by Everabyte after the fact: if you lose your credentials and your recovery passphrase, we may not be able to restore access to your account.

Important — Do not confuse the two. A lost password threatens access to your account and can be recovered; a lost recovery passphrase, combined with lost credentials, can mean your account cannot be restored. See Lost encryption key or recovery passphrase.

Why the distinction matters in practice

Because the two secrets protect different things, they call for different habits. Treat your password as the front door of your account, and your recovery passphrase as the only spare key. Protect both — and remember that only one of them can be replaced.

Where file encryption fits

Two encryption layers protect stored files — application-level AES-256-GCM before storage, plus a storage-level layer at rest. You do not manage file encryption keys day to day; decryption of your stored files requires an operation authorized by you. See The Everabyte encryption model.

Common issues

Can I use my password to decrypt my files?

File encryption is operated by the Everabyte encryption layer; your password protects access to your account, not the encryption of stored files.

What happens if I lose my password?

Your password protects access to your account and can be reset. If you cannot sign in, see I cannot sign in.

What happens if I lose my recovery passphrase?

If you lose your credentials and your recovery passphrase, we may not be able to restore access to your account. See Lost encryption key or recovery passphrase.

Can Everabyte reissue my recovery passphrase?

No. Everabyte cannot generate a new recovery passphrase for you after the fact. A backup you control is the only safety net.

Still need help?

Can't find what you're looking for? Our support team can help.