Recovering your account

By default, recovery happens via a 6-word phrase shown to you exactly once when you registered. You can also optionally add a verified email or phone number — during sign-up or anytime in Settings → My Account — as an extra way back in.

1. If you still have the phrase

1. Open NOX and click Forgot password? on the login screen.
2. Enter your username, paste the recovery phrase, and pick a new password.
3. You're back in. The phrase is now burned — generate a new one from Settings → My Account → Recovery Phrase.

2. If you've lost the phrase but still know your password

Log in normally, then go to Settings → My Account and generate a new recovery phrase. Save it somewhere safe this time — a password manager is the best home.

3. If you've lost both the password and the phrase

If you never added a recovery email or phone number, your account cannot be recovered. This is by design: there is no third channel that could be social-engineered. Your data is gone, but it is also definitively private.

You can register a new account with a different username. Ask the instance operator (the person hosting your NOX server) if they can help re-add you to the servers you were in.

4. If the instance operator changes your password

Operators have direct database access and could in theory reset your password by editing the passwordHash column. NOX does not provide an admin UI for this — it would weaken the privacy story. If your operator does it for you, treat the new password as untrusted and change it the moment you log in.

5. Storing the phrase well

• Best: a password manager (1Password, Bitwarden, KeePass).
• Good: a piece of paper in a desk you trust.
• Bad: a screenshot in your phone's Camera Roll.
• Worst: nowhere — you'll forget it.