Devices and account recovery
See and revoke the devices signed in to your account, change your master password, recover your account with your Secret Key, and what to do if a device is lost.
See your devices
Every Mac, iPhone, Android device or browser that has signed in to your account is registered as a device.
| App | Where |
|---|---|
| Mac | Sidebar > Settings & management > Devices (设备), or Account security > Device management |
| iPhone | Settings > Device management (设备管理) |
| Android | Settings > Device management (设备管理) |
| Web vault | Account menu > Account security > Device management |
The list shows each device's name, when it was registered and when it was last active; the web vault also shows its key version. The device you're using is marked. The number of devices you can register depends on your plan; see Plans and billing.
Revoke a device
- Find the device in the list and click Revoke (吊销; 撤销 on iPhone and Android).
- Confirm. It takes effect immediately: the device's sessions end on the spot, and it can no longer sign in or sync your vault.
You can't revoke the last device on your account that hasn't been revoked.
Change your master password
You'll need your current master password and your Secret Key.
| App | Where |
|---|---|
| Mac | Account security > Change master password (更换主密码) |
| iPhone | Settings > Change master password (修改主密码) |
| Android | Settings > Change master password (修改主密码) |
| Web vault | Account security > Change master password (改主密码) |
- Enter your current master password and your Secret Key.
- Enter the new master password twice. It must be at least 12 characters and different from the old one.
- Confirm. MimiKey checks your old master password, re-encrypts every item on your device under the new key, and then commits the change.
- When it's done, every session on every device ends, including this one. Sign in again on each device with your new master password.
Your Secret Key doesn't change, so your Emergency Kit stays valid. If something goes wrong partway through, MimiKey rolls back the items it had already re-encrypted, so you're never left with a mix of old and new.
Forgot your master password
As long as you still have your Secret Key — in your Emergency Kit, or saved on a device you're signed in on — you can reset your master password.
- Click Forgot master password? (忘记主密码？) on the sign-in screen of the Mac or Android app, or open /app/?view=recover in the web vault. The iPhone app doesn't offer recovery yet.
- Enter your account email and send the code. To stop people using this page to find out which emails are registered, it always says a code was sent; only real accounts get an email.
- Enter the 6-digit code from the email (valid for 10 minutes).
- Enter your Secret Key and choose a new master password (at least 12 characters).
- Confirm the reset. All sessions on your account end, and MimiKey sends a security notice to your email.
- Sign in with your new master password and your existing Secret Key.
Important A reset replaces your sign-in credentials; it doesn't re-encrypt your existing items. Items encrypted under your old master password can't be decrypted under the new one, and appear as items that can't be decrypted (无法解密的条目). If a device was still signed in before the reset, you can use it to change your master password and keep those items; otherwise you can only delete them, or empty your vault in Account security.
Without your Secret Key
Account recovery requires your Secret Key. If you've lost both your master password and your Secret Key, your data can't be recovered: the server never had either one, so it can't reset or decrypt anything for you. Your email address alone isn't enough to recover the account — this prevents anyone with access to your inbox from taking over your vault.
If a device is lost or stolen
- On another signed-in device or in the web vault, open the device list and revoke the missing device.
- Change your master password. The missing device holds your Secret Key; once you change your master password, the Secret Key alone isn't enough to sign in.
- If you don't have any other signed-in device, sign in on a new device or the web vault with the Secret Key from your Emergency Kit and your master password, then do steps 1 and 2.
Changing your master password doesn't replace your Secret Key, so make sure the new master password is strong and not used anywhere else.
Empty your vault
In Account security, choose Empty vault (清空保险库) and type your account email to confirm. This deletes all items and sync history on your account. Your account and registered devices remain, and your sessions stay active.
Important Emptying your vault can't be undone. It's usually only needed after a master password reset, to clear out items that can no longer be decrypted.