.. toctree::

.. _mp:

###############
Master password
###############

Enpass encrypts all your data using the master password. You also unlock the app with it. Make the masterpassword strong. If you lose it, we cannot help you recover it. Write it down and store it in a safe, secure place. For tips on creating a strong password, see this `blog post  <https://www.enpass.io/smart-ways-of-thinking-smart-passwords/>`_.

.. CAUTION:: The master password is irrecoverable.

.. _kf:

Keyfiles 
########

Advanced users can add another layer of security by using a keyfile with the password. Enpass appends the characters in the keyfile to the password and uses them together to encrypt your data.


To add a keyfile for your device, you need to:
  
1. Generate a keyfile from your desktop and
2. Add it your device.

.. _gk::

Generating a keyfile
####################

To generate a keyfile, follow these steps:

1. Open Enpass on your desktop, click **Settings > Security > Change master password**.
2. Enter the master password. Click **Continue**.
3. At the bottom of the screen, click **Advanced**.
4. Click **Generate keyfile**.
5. Name the keyfile and save it.
6. In the **Enter New password** and **Confirm New password** fields, enter the master password.
7. Click **Done**.

You have successfully created a keyfile.

If you have created multiple vaults and added keyfiles to them, you will need them to open these vaults.

.. Important:: Keep the keyfile safe and secure as you will not be able to log in to Enpass without it. It is also irrecoverable- so backup all your keyfiles.



.. _qr:

Generating QR code for a keyfile
################################

To generate QR code for the keyfile, follow these steps:

1. From Enpass on your desktop, click **Settings > Vaults**.
2. Select the particular vault.
3. Click the **ellipsis** menu button (3 vertical dots) at the top right corner.
4. Click **Keyfile QR Code**. (:ref:`Back<tr>`)


.. _rk::

Removing keyfiles
#################

To remove a keyfile, follow these steps:

1. From Enpass on your desktop, click **Settings > Security > Change Master Password**.
2. In the **Change Password** screen, authorize yourself with the master password.
3. Click **Advanced** at the bottom.
4. Click **Remove keyfile**.
5. Enter the password.
6. Click **Done**.

You have removed the keyfile.