UStackUStack
Forgot Password icon

Forgot Password

Forgot Password is a secure client account memory system for agencies. It stores client logins, recovery details, 2FA setup keys, and handoff notes in one protected workspace.

Forgot Password

What Forgot Password does

Forgot Password is a secure client account memory system for agencies. It helps teams keep client logins, recovery details, 2FA setup keys, notes, and handoff context in one protected workspace instead of spreading them across chats, spreadsheets, and browser profiles.

The product is built around one client vault per account so the next teammate can find the reset steps, ownership notes, and access history without reconstructing the history from scattered documents. Its security model combines encrypted storage, step-up verification before reveals, logging, and rate limits to reduce casual exposure while still supporting team workflows.

Core capabilities

Client vaults for access memory

Each client gets a single vault for passwords, usernames, recovery codes, 2FA setup keys, notes, ownership context, and handoff details, so related access information stays together.

Encrypted credential storage

Stored credential payloads are encrypted before they are written to the database, using AES-256-GCM according to the security page.

Reveal-time verification

Users must re-enter their own account password before a secret is decrypted and shown, making access to sensitive data a deliberate step rather than a casual click.

Audit visibility

The product records actions such as sign-in, sign-up, credential creation, successful reveals, failed reveal checks, invites, and role changes, giving teams an audit trail to review.

Failed-attempt protection

Reveal attempts are rate-limited, and failed checks are tracked so repeated bad attempts are harder to miss.

Session and access controls

The security pages say the app uses server-managed sessions and organization boundaries checked again at reveal time, supporting team access without treating every logged-in session as full access.

Common ways agencies use it

  • Centralize client credentials

    Teams can keep passwords, recovery codes, and 2FA setup keys in one client vault instead of searching across chats and spreadsheets when work needs to move quickly.

  • Manage handoffs and staff changes

    When staff change, vacations happen, or a project is transferred, the stored ownership notes, reset paths, and access context help the next person continue without guessing.

  • Recover access during urgent work

    Before a campaign launch or other time-sensitive client task, the team can check the vault for the exact login, recovery path, or setup detail they need without depending on a single person’s memory.

  • Support shared team access

    Agencies that want multiple teammates to work from the same client records can use the shared workspace, role-based access, and audited reveals to keep access coordinated.

  • Review sensitive access activity

    Teams that care about operational review can use the audit trail to see who revealed what, when invites or role changes happened, and whether failed reveal attempts occurred.

Pros and Cons

Pros

  • Keeps client logins, recovery details, 2FA keys, and handoff notes in one place.
  • Uses encrypted storage and step-up password verification before sensitive data is shown.
  • Provides audit visibility for reveals, invites, and role changes.
  • Supports agency handoffs by preserving account context and ownership notes.
  • Offers a free tier for up to 25 client profiles, which lowers the barrier to trying the product.

Cons

  • It is not a zero-knowledge vault; the server can decrypt secrets during approved reveal flows.
  • The public site does not list third-party integrations.
  • Pricing is simple, but only two tiers are shown on the site, so larger or custom deployment options are not described publicly.

FAQ

What is Forgot Password for?

Forgot Password is built for agencies that need one protected place to keep client logins, recovery details, 2FA setup keys, and handoff notes. The site describes it as a secure client account memory system rather than a general consumer password manager.

Does it have a free plan?

Yes. The pricing page includes a free plan for up to 25 client profiles, with an Agency Pro plan at $15 per month or $150 per year once an agency grows beyond that limit.

How does secret reveal work?

The product supports deliberate reveal workflows: a user re-enters their account password before stored secrets are shown, and reveal activity is logged. The security pages also say reveals are rate-limited and the plaintext view is short-lived.

Is Forgot Password zero-knowledge?

No. The security pages explicitly say Forgot Password is not zero-knowledge. The server can decrypt stored secrets during an approved reveal, which is presented as a tradeoff to support team workflows, auditing, and recovery.

How do agencies get help setting it up?

The contact page says the team can help with onboarding, workspace setup, team roles, reveal workflows, plan questions, and security conversations. It also gives [email protected] as the contact address.

Quick Facts

Category
Security / Productivity
Primary users
Agencies managing client account access
Platform model
Web-based workspace
Source domain
forgotpassword.xyz
Pricing model
Free up to 25 client profiles, then Agency Pro at $15/month or $150/year
Security model
Encrypted storage with reveal-time verification; not zero-knowledge