How one developer built account recovery for a zero-knowledge password manager

A developer spent ten months building LisaVault, a zero-knowledge password manager that solves the long-standing problem of account recovery without compromising encryption integrity. Traditional zero-knowledge systems cannot recover lost master passwords because the server never holds the user's encryption key, making forgotten credentials a permanent data loss. Common workarounds like key escrow, security questions, and email-based resets all reintroduce server-side access, undermining the zero-knowledge model. The proposed design separates the vault encryption key from the master password, instead wrapping it in two independent copies — one protected by the master password and one by a one-time Recovery Kit generated at signup. Neither secret is ever stored or accessible server-side, preserving zero-knowledge guarantees while giving users a genuine recovery path.