> For the complete documentation index, see [llms.txt](https://oten.gitbook.io/drive-support/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oten.gitbook.io/drive-support/playbooks/work-with-data.md).

# Change a vault password

**What you'll do:** Change the password on a vault (or a Shadow Layer), or reset it if you've forgotten it.

**Why it matters:** The vault password is cryptographic — it's part of what unlocks your files. Changing it re-secures the vault; resetting it is your safety net if you forget.

### Change the password (you know the current one) <a href="#change-the-password-you-know-the-current-one" id="change-the-password-you-know-the-current-one"></a>

1. Open the vault's actions (context menu / vault detail).
2. Choose **Change password** and enter the **current** password.
3. Set and confirm the **new** password.
4. The vault is re-keyed. **A new Vault Recovery Key may be issued** — save it, and discard the old one.

### Reset the password (you forgot it) <a href="#reset-the-password-you-forgot-it" id="reset-the-password-you-forgot-it"></a>

1. Choose **Recovery / Reset password** for the vault.
2. Provide that vault's **Vault Recovery Key**.
3. The reset follows the vault's **key-storage choice**:
   * **Security** (stored key) vaults reset **with the vault key**.
   * **Convenience** (no stored key) vaults reset **with your User Key alone**.
4. For a vault with Shadow Layers, each layer can show a few **sample file/folder names** during reset so you pick the right layer.
5. Set a new password and save the new recovery key.

**Common mistakes**

* **Changing a password with sync off.** Other devices won't get the new key. Enable sync so the change propagates.
* **Not updating your records.** After a reset, your old "which password opens which layer" note is stale — update it.
* **Losing the recovery key before you need it.** Without it, a forgotten password is unrecoverable.

> Changing a password re-keys data; a follow-up **key rotation** may be prompted — see [Rotate keys](/drive-support/playbooks/work-with-data.md).