What happens to your passwords when you lose access

Bitwarden, 1Password and Proton Pass fail differently when you forget your master password. The difference decides whether you lose the account or the data.

Published 2026-08-05 · Keenvale

Almost every comparison of password managers ranks the same things: autofill quality, how many devices, whether there is a free tier. Those matter, and they are also the things you will stop noticing after the first week.

The thing you will notice — once, badly, and possibly permanently — is what the tool does the day you cannot get in.

That day has a name in every vendor’s documentation, and the three most recommended managers answer it in three structurally different ways. Not “better and worse”. Different in kind. One of them can hand you back your account while permanently destroying its contents, and it is not obvious from the marketing pages which one.

This guide is about that single question.

Why the answer is never “contact support”

All three tools are zero-knowledge, which is a specific technical claim and not a slogan: the encryption key is derived on your device, and the vendor never holds anything that can decrypt your vault. Bitwarden states the consequence plainly — as a zero-knowledge solution, Bitwarden “and its systems have no knowledge of, way to retrieve, or way to reset your master password.”

So there is no support ticket that ends with someone letting you back in. What exists instead is a backup path that you had to set up in advance. Each vendor built a different one, and each has a different failure mode.

1Password: two secrets, and you must keep one on paper

1Password does not derive your key from your password alone. It uses what it calls Two-Secret Key Derivation: your account password, which you remember, combined with a Secret Key — 34 alphanumeric characters generated on your own device.

The split exists for a real reason. A memorable password carries roughly 40 bits of entropy; the Secret Key adds 128 bits that no human memorises. Together they make a key that survives a server breach, because the server never had the Secret Key to begin with. In 1Password’s own words: “Your Secret Key was created on your own device. We have no record of your Secret Key and can’t recover it.”

The cost is symmetrical and absolute. Lose either half and there is no recovery. The Secret Key does not rescue you from a forgotten password, and the password does not rescue you from a lost Secret Key.

This is why 1Password pushes an Emergency Kit at signup — a PDF holding the Secret Key. Treating that PDF as onboarding paperwork is the single most common way people lose a 1Password vault.

Who this suits: people who will actually print the kit and put it somewhere physical. If that sentence made you wince, this is not your tool.

Bitwarden: one secret, and the last resort is starting over

Bitwarden derives everything from the master password. There is no second factor baked into the key, which makes the model simpler to explain and simpler to lose.

Its documented paths back in, roughly in order of how well they work:

• A device that is still unlocked. If you are still signed in somewhere with a PIN or biometrics, you can get in and change the password from inside. This is the path that actually saves most people, and it is time-limited by nothing but luck.
• Emergency Access. A trusted contact can be granted read or takeover access. This is a paid feature, which is worth knowing before you assume the free tier is simply a cheaper Bitwarden.
• Account recovery, where an administrator resets a member’s master password. This is an organisation feature — relevant for a company deployment, not for a personal account.
• The master password hint, emailed to you. Useful in proportion to how good your hint was.

And then the sentence that matters, from the same page: if none of those work, “there is no way for Bitwarden to recover the account or its data. You will need to delete your account and create a new one.”

Who this suits: people who will set up Emergency Access on day one and keep an offline export. The free tier is genuinely usable, but note that the recovery feature most likely to save you sits behind the paywall.

Proton Pass: the account and the data can be recovered separately

This is the model most people get wrong, and the one worth reading twice.

Proton splits recovery into two distinct outcomes, and you can get one without the other.

A recovery phrase — twelve words, issued at signup — is described by Proton as “essentially a second password used to encrypt a copy of your encryption key”. Reset with the phrase and you keep everything, because you are decrypting a backup copy of the key rather than proving anything to a server.

But Proton also lets you reset the password by email or SMS verification. That gets your account back. It does not get your vault back. Proton’s documentation is direct about it: if you recover the account by email or SMS, “your data remains encrypted.”

So the failure mode here is unusually cruel in its optics: you log in successfully, everything looks normal, and the vault is unreadable. There is a third path — signing in on a previously trusted device can activate a recovery file and restore the data — but that depends on having such a device to hand.

Who this suits: people who want a recovery path that does not depend on a printed sheet, and who will store the twelve words properly. The email reset is a trap only if you assume it does what email resets do everywhere else on the internet.

The comparison that actually matters

Prices, for completeness

Checked August 2026, annual billing, list prices before any regional variation.

Price is the least interesting axis here, and we have put it last on purpose. The gap between the cheapest and the most expensive option is a few dollars a month. The gap between recovering your vault and not recovering it is everything you have stored in it.

What we would tell a friend

• If you will keep a piece of paper safe for years, 1Password gives the strongest cryptographic story, and the Secret Key genuinely defends against a class of attack the others do not.
• If you want a real free tier and are willing to configure Emergency Access, Bitwarden is the pragmatic default — but budget for Premium if recovery matters to you, because that is where the feature lives.
• If you want recovery that does not depend on paper, Proton Pass is the most forgiving, provided you understand that the email reset is not a recovery path for your data.

And regardless of which you pick: export your vault today and store it offline. Every scenario above ends well if you have an export, and every one of them ends badly if you do not. It is the five-minute task that makes the rest of this article academic.

What we have not tested yet

We wrote this from each vendor’s own documentation, and we have quoted it rather than paraphrased it so you can check us. What we have not yet done is run each recovery flow end to end on a real account — how long the trusted-contact waiting period actually takes in practice, whether the Proton device recovery works as smoothly as described, what the 1Password family organiser can genuinely reset.

We will update this page when we have run them. Until then, treat the table above as an accurate reading of what the vendors commit to in writing, which is a different thing from what happens on the day.