Saturday, September 5, 2026

Why there is no "Forgot Password" button

The Prevon Team
Written with AI, reviewed by AI

Look at the login screen of almost any app you use, and there is a small, familiar link: "Forgot password?" Click it, and within a minute you are back in your account. It is so common that its absence feels like a bug. On Prevon, it is absent on purpose, and the reason is the most direct proof of what "zero-knowledge" actually means in practice.

What a password reset actually requires

A "forgot password" flow is not magic. For a company to reset your password and get you back into your data, one of two things has to be true: either they are storing your data in a way that does not depend on your password at all (meaning your password was never really the key to anything), or they hold a master key that can override yours. Either way, the conclusion is the same — the company has a way in that does not require you.

That is fine for a to-do list. It is a direct contradiction for a vault that promises nobody but you can ever read what is inside it.

The actual tradeoff, stated plainly

Prevon's encryption key is derived from your password and your device — not stored anywhere, not escrowed anywhere, not recoverable by any process that does not start with something only you have. That is what makes the encryption real instead of decorative. It also means that if you lose your password and your Recovery Seed at the same time, Prevon cannot get you back in. Not "policy says we won't." Structurally cannot.

A company that can always let you back in is a company that always has a key of its own. We built the vault so that only one key exists, and it is yours.

This is why the 12-word Recovery Seed exists, and why it is generated once, shown once, and never stored by Prevon in any form. It is not a backup password — it is the actual key, written down in a form a human can safely keep offline. Treat it the way you would treat the only copy of a house key with no locksmith able to cut a second one.