Skip to main content
tiCrypt 2.18.1

Change Password

ResearcherRequires: User, Sub-admin, Admin, or Super-admin role
Permission requirements
  • None.

Access Your Password Change Menu​

  1. Go to the Open user menu icon in the toolbar.
  2. Select the Change Password option.
caution

Changing your password generates a new key file: your private key is re-encrypted with the new password. The new key file downloads as soon as you click Apply; use it from your next login on.

Change Your Password​

Location: Open user menu > Change Password

  1. In the Change password pop-up, enter your current password in Current Password.
  2. Enter your new password in New Password and again in Confirm New Password. The bar below the fields shows how strong the new password is; it must meet your deployment's strength requirement.
  3. Click Apply. Pressing Enter does not submit the form.
Result:

The new key file downloads, and the pop-up title changes to Password changed! with a list of what to do next. The only button left is Logout, which logs you out so you can log in again with the new password and the new key file.

note

For your protection, the password fields clear themselves after 60 seconds without typing. While you pause, the pop-up shows "Passwords will be cleared in Ns", and when they clear, a pop-up reads "Passwords scrubbed from memory".

Changing your password replaces your key file

Even if you set the same password again, a new key file is generated. If your deployment has split credentials enabled, the server-side encryption credentials are also regenerated, so the old key file stops working permanently.

tip

After changing your password, delete all copies of the old key file and replace them with the new key file that was downloaded when you clicked Apply.

If You Forgot Your Password​

Changing a password requires the current one. If you no longer have it, you cannot do this yourself.

  1. Contact your administrator.
  2. Your administrator starts a key recovery. Recovery works through key escrow, not administrator rights: one escrow user from each escrow group shares their group's key part, and once all the key parts are with one escrow user, that escrow user can recover your key. See Recover a User's Private Key.
  3. You receive a new key file and a temporary password over a secure channel.
  4. Load the new key file, log in with the temporary password, then set a new password with Open user menu > Change Password.
  5. Securely store the new key file that downloads when you change the password.
Without key escrow, a forgotten password cannot be recovered

This only works if your account was enrolled in key escrow. If it was not, a forgotten password means the account and all data encrypted under it are permanently unrecoverable. No administrator, and no one at Tera Insights, can reverse that.

note

Your previous key file cannot be used to log in after recovery. Recovery gives you a new key file, and changing the temporary password creates another one. Keep only the newest.

Confirmations, Errors & Solutions
Password Changed

The password has been changed and the key file has been re-created. Please be aware of the following:

  • Make sure you delete all copies of the old key file.
  • Make backup copies of the new key file and store them in secure locations.
  • The cached key is changed as well. Use the new password on the next login.
  • Even if you change your password back to the original password, your old key file will still not work if your tiCrypt deployment is configured to store additional encryption credentials on the server (because they will have been replaced with newly generated values).
Passwords Do Not Match

Passwords do not match

Re-type New Password

Re-type the new password in the New Password field, then re-type the same password in the Confirm New Password field.

New Key Could Not Be Stored

An error occurred storing the new private key

Try Again or Contact Your Administrator

Click Apply again. If the error repeats, download your debug logs from the user menu and send them to your administrator.

Incorrect Password

Incorrect password, please try again. 0-4/5 tries left

Re-type your correct existing password

In the Current Password field, re-type your correct existing password. You have 5 attempts before you are logged out. If your deployment uses key escrow, your key can be recovered through escrow rather than by an administrator: one escrow user from each escrow group shares their key part, and once all the key parts are with one escrow user, that escrow user can recover your key. Ask your administrator to start that process. See Recover a User's Private Key.