Knowledge Base

Frequently Asked Questions

Everything you need to know about our Zero-Knowledge architecture, account recovery, and security protocols.

Account & Access

I forgot my Master Password. Can you reset it? ▼

Short Answer: No.

Sentinel Base operates on a Zero-Knowledge architecture. Your Master Password is never sent to our servers. It is used locally on your device to derive the encryption key (via Argon2id) that unlocks your vault.

Because we never possess your password or your encryption key, we technically cannot reset it for you. If you lose your Master Password, your data is cryptographically irretrievable.

How do I change my Master Password? ▼

Currently, automatic password rotation is in development. To change your password now, follow this Migration Protocol:

  1. Export Data: Go to your Profile and select "Export" to download your .sentinel backup file.
  2. Hard Reset: Log out, then use the "Emergency Reset" button on the login screen to wipe the local database.
  3. Re-Initialize: Register a new vault with your new desired password.
  4. Import Data: Go to your Profile and select "Import" to restore your backup into the new vault.
I am stuck on a "Corrupted Data" error. What do I do? ▼

If your local database becomes corrupted (usually due to a browser crash during a write operation), you can perform an Emergency Hard Reset.

  1. On the Login Screen, look for the "Emergency Reset" button at the bottom.
  2. Confirming this will wipe the local copy of your vault on that specific device.
  3. After the wipe, log in again. If you had Cloud Sync enabled, your data will be re-downloaded from the server.

Security Core

What encryption algorithms do you use? ▼
  • AES-256-GCM: Used for encrypting your vault data. GCM mode ensures both confidentiality and integrity (tamper-proofing).
  • Argon2id: Used for Key Derivation. We use hard memory limits (64MB) to make brute-force attacks computationally expensive.
Can Sentinel Base employees see my passwords? ▼

Absolutely not.

When you use Cloud Sync, your device sends an encrypted "blob" to our servers. To us, this blob looks like random noise. We do not have the key to decrypt it. Only your devices (which hold the Master Password) can unlock this data.

Sync & Storage

What happens if I go offline? ▼

Sentinel Base is Local-First. This means you can read, write, and edit your passwords without an internet connection. Your changes are saved to an encrypted local database (PouchDB).

Once you reconnect to the internet, the app will automatically sync your changes to the cloud.

How do I backup my data manually? ▼

You can export your encrypted vault at any time.

1. Click your Profile Icon in the top right.

2. Select "Export".

3. This will download a .sentinel file.

You can import this file later to restore your data on any device.