Choosing a Strong Master Password

The key to your vault

Overview

Your master password is the single key to your entire vault. It’s the only password you need to remember, so it must be both strong and memorable. Importantly, Heimlane cannot recover your master password if you forget it.

What Makes a Strong Master Password

A strong master password should be:

  • Long: At least 14 characters (longer is better)
  • Unique: Never used for any other account
  • Memorable: Easy for you to remember without writing it down
  • Random: Not based on personal information (birthday, pet’s name, etc.)

Instead of a complex password like K9#mP2$xL!qR, use a passphrase of random words:

Example: correct-horse-battery-staple

Why this works:

  • Easier to remember than random characters
  • Longer passphrases are extremely secure
  • You can make it memorable with a mental story

Better example: purple-elephant-juggling-7-pianos!

Steps to Create Your Master Password

  1. Think of 4-6 random words

    • Use truly random words, not a sentence or phrase from a book
    • Mix in a number or symbol to add complexity

  2. Connect them with separators

    • Use hyphens, spaces, or other characters: word-word-word

  3. Make it memorable

    • Create a mental image: picture a purple elephant actually juggling pianos

  4. Test your memory

    • Don’t set your master password until you can remember it reliably
    • Practice typing it several times

What Happens If You Forget Your Master Password

Important: Heimlane uses zero-knowledge encryption. We never have access to your master password or vault data.

If you forget your master password:

  • There is no password reset - we cannot recover your data
  • You must delete your account and start over
  • All vault data will be permanently lost

To help prevent this:

  • Set up a Password Hint (Settings > Account > Master password hint)
  • Write down your master password and store it in a physical safe
  • Consider setting up Emergency Access for a trusted person

Tips

  • Never share your master password with anyone, including Heimlane support
  • Never enter your master password on any site except vault.heimlane.io
  • Change your master password immediately if you suspect it’s been compromised
  • Use a password hint that only makes sense to you

Troubleshooting

Issue: I entered my password but it says incorrect Solution: Master passwords are case-sensitive. Check Caps Lock. Try typing it in a text editor first to verify.

Issue: I forgot my password hint Solution: Request your hint at the login page by clicking “Get master password hint.” It will be emailed to you.

← Back to Vault Help