RightPlace is end to end encrypted: your data is locked with a key that only you hold, so that nobody else, not even us, can read it. That privacy is the reason a forgotten password is handled the way it is.

Why we cannot simply reset your password

On most services, the company can unlock your data and hand it back after a password reset, because they hold a copy of your key. RightPlace is built so that we never hold your key. That is what keeps your data private even if our servers are ever breached.

The trade off is simple and honest: if you forget your password and you have not saved your recovery code or kept another signed in device, there is no key left to unlock your existing data. We cannot recover it for you, because by design we never had the means to.

What “start fresh” does

When you choose to start fresh, we set your new password and give you a new, empty account under the same email. Your previous encrypted data is not carried over. You can begin using RightPlace again right away, and your next sign in on the desktop app finishes setting up your new account.

How to avoid this next time

You can make your account fully recoverable in two ways, and either one is enough:

• Save your recovery code. This is your account key. Keep it somewhere safe, like a password manager. With it, you can always set up a new device and reach your data. See Recovery code.
• Keep a second device signed in. If you stay signed in on more than one device, a device you still have can set up a new one for you.

To learn more about how your data stays private, read about our zero knowledge approach.