Recovery codes
What recovery codes are, and how to keep them safe.
- Web Portal
Glueprint’s portal uses your password to derive the encryption keys that protect your data. If you forget your password and don’t have a recovery option set, content encrypted under that password can’t be decrypted.
Recovery codes are how you avoid that. Glueprint generates a set of one-time codes for you during signup, each wrapped with a key that can unlock your account data without your password.
When you get recovery codes
Recovery codes are generated once, during registration. The portal shows them to you on the screen right after sign-up. Save them somewhere safe at that moment — a password manager, a printed sheet in a desk drawer, an encrypted note.
Treat the codes like passwords. Anyone who has them can recover access to your account.
You can see how many recovery codes are still active on your account under Settings > Account in the portal. Used codes are consumed once each.
Lost your password?
If you lose your password and you have unused recovery codes, contact support. They can verify your identity, accept a recovery code, and help you reset.
Without recovery codes
If you have no unused recovery codes and you forget your password:
- Your account isn’t gone. Support can verify your identity through email and reset your password.
- However, data encrypted with the lost password is unrecoverable without a recovery key. That means any sessions or chat that synced through the relay during your previous account state can’t be decrypted on a new password.
- Local data on the desktop is unaffected; it’s not encrypted with your portal password.
That’s why we strongly recommend keeping the recovery codes you were shown during signup.
SSO accounts
Accounts that sign in via SSO (Team or Enterprise plans with an identity provider) inherit their authentication from the IdP. They don’t use recovery codes. If you lose access to the IdP, contact your administrator or Glueprint support.
Related topics
- Cloud Relay & Encryption for how the encryption keys work.
- SSO and Enterprise for organizational sign-in.
- Billing.