Musubi Vault
All help topics

Security and devices

Change your master password, manage passkeys and the devices that hold a copy.

The Security page has four parts: Unlock with a passkey, Your keys, Export a copy — see Exporting a copy — and Devices with a local copy. It needs the vault open.

Change the master password

  1. Under Your keys, find Change the master password.
  2. Type the Current master password, then the New master password and Repeat it.
  3. Press Change.

Your keys stay the same: what changes is the password that opens them. That is why nobody who shares collections with you needs to do anything. Use at least twelve characters, as when you set it the first time.

Changing it removes your unlock passkeys, on every device — set them up again afterwards. The local copy on this device is rebuilt from the server.

If you forgot your master password

It cannot be recovered. The server never had it, and nobody — administrator, support or Musubi — can reset it or open your vault without it. What was shared with you is still there for the others who have it, but you cannot open it with this account.

An unlock passkey is a second way in, not a recovery: it opens the vault on the device where you set it up, and changing the master password removes it.

Unlock passkeys

Unlock passkeys lists the ones you set up, with when they were added and last used. Remove takes one away and nothing else. With none, the master password is the only way in.

Devices with a local copy

Each browser, phone or extension that syncs your vault keeps an encrypted copy of what it was granted. They appear here the first time they sync, with when they last synced; the one you are using is marked “this one”. Members see their own devices; owners and admins see everyone's.

  • Revoke stops that device's next sync.
  • Request wipe revokes it and also asks it to delete its copy.

Neither takes back a copy that already left, and nothing can. A wipe is a request that the device obeys when it next connects — and today none of the Vault apps carries it out yet: the request is recorded and the device revoked, but its copy stays. If you lost a device, change the passwords it could open.