Unlock encrypted data or use a recovery code

Choose an unlock route

The lock screen offers the routes available to that encrypted account. A password key slot may permit the account password. A recovery slot permits the saved recovery code. Passwordless or linked-provider accounts are directed to the recovery code when no password route exists.

Unlock safely

1. Confirm you are using the expected account and device.
2. Connect to a trusted, stable network, especially after an update or on a newly enrolled device.
3. Choose the password route only when the screen offers it, then enter the account password privately.
4. Otherwise choose the recovery-code route and enter the code locally. Preserve its exact characters and grouping.
5. Wait for unlock and any required migration check to complete before repeating the attempt.
6. After access returns, open Settings → Privacy & Security and review Encryption Active and device status.

Expected result

The local encryption key becomes available and encrypted categories can be read. Unlocking does not itself prove every older category has completed encryption or sync.

If unlock remains blocked

1. Verify connectivity and retry once after the server check can complete.
2. Use the other offered slot only if you possess its valid secret; do not guess repeatedly.
3. Do not clear app identity, revoke the current device, rotate the encryption key, or disable encryption as an unlock shortcut.
4. Contact support with platform, version, and exact non-secret error text only.