Master Password Management for Business Users

A user's Master Password is the key to their RoboForm data. All RoboForm data is encrypted, meaning that the only way to access the data is with the correct Master Password.

Password management is composed of 3 elements: Creation, Rotation, and Resetting.

1. Creation

During account setup users will be prompted to sign in using a temporary password from then RoboForm website. After signing in the user will create a Master Password.

Users RoboForm Master Password is under strict minimal complexity regulations set by the company admins. If company admins do not set company specific Master Password minimal complexity rules, then RoboForm general minimal complexity rules are enforced: 8 characters long and at least 4 of them need to be non-numeric characters.

It is very important to remember the Master Password. All RoboForm data is encrypted and we do not know any user's Master Password. If a Master Password is lost there is no way to recover it.

2. Rotation

Rotating the Master Password is a way to help keep a RoboForm account secure. The administrator of a company can require their users to rotate their Master Password after a set number of days through company policies. Follow these steps to rotate the Master Password:

1. Click options from the RoboForm editor. 
   
   
                                
   
   
   
2. Open the Security tab.
   
   
   
   
   
3. Click Change Master Password
   
   
   
   
   

3. Reset

If user forgets their Master Password, please contact your company RoboForm account administrator, an administrator can send a reset Master Password request. There is no way to recover a forgotten Master Password. The data in an account remains encrypted at all times and the only way to decrypt the encrypted account data is with the correct Master Password. Even if the Master Password is reset the data will still be lost since its been encrypted with the old (forgotten) Master Password. After a user has reset their Master Password, all of their RoboForm data will be gone and the admin will need to add them back into any groups they were a part of.