I think someone else knows my vault password

Maybe a text that shouldn’t have been sent, a family member who shouldn’t have access anymore, a password reused somewhere it leaked. Whatever the reason: two steps, in this order.

Step 1: change your vault password

Account Settings → Vault Security → Change password. This swaps the key wrapping — your vault contents aren’t re-encrypted and nothing about your data changes. From your next sign-in, only the new password unlocks the vault; the old one is dead.

Two things to know:

• Family members need the new password. The app does not notify or update them — share it with the people who should still have access, safely. Until you do, they can’t unlock the vault.
• If your estate documents hold your vault password — the sealed letter with your attorney, the fireproof box — update them the same day. An envelope with the old password is as useless as no envelope at all.
• Your recovery code is unchanged by this step — it still works. Which brings us to:

Step 2: decide about your recovery code

Changing the vault password closes the front door, but the recovery code is a second key — anyone holding it can still reset your vault password and walk in. So ask: could this person have seen your recovery code? Photographed the printout, had access to the drawer, helped you set up the account? If there’s any doubt, generate a new one: Account Settings → Vault Security → Generate a new recovery code. The old code stops working immediately. Print the new one and store it well — then destroy old printouts.

If the person is a family member

Remove their access first, then do both steps above. Removal alone doesn’t change the locks — they still know the password until you rotate it.