We had to change our old domain. guideora.net is our new and only official domain. Never trust any fake domain using the GUIDEORA name, or similar names pretending to be GUIDEORA.

GUIDEORA

password managers guide

Changing the Master Password Is a Ceremony, Not a Mood

Jordan HaleJordan Hale· Privacy Editor· Updated March 28, 2025· 10 min read

Some links on this page may earn GUIDEORA a commission. Disclosure

Quick take

Change the master password after a device theft, a shoulder-surf, or a leaked phrase — not every month. Update the recovery kit the same hour. RoboForm currently unlocks with a master secret and, on newer builds, passwordless options. Confirm live. Unlock every device after the change.

NIST already told you to stop the monthly ritual

Arbitrary resets make weak patterns. A leaked master is a real event. That is when you rotate.

A long unique phrase you can type hungover is still the job. A generator string you cannot type on a phone is a lockout.

From the record

The master is the one secret you are allowed to remember. Treat rotation like a fire drill.

GUIDEORA rule for master passwords

Do it on a calm machine

On your own laptop. New phrase. Confirm. Print or rewrite the kit. Shred the old kit. Open the phone app and unlock. Open the browser extension and unlock. Emergency Access still points at a person who knows there is a new world.

A new master password and an updated recovery kit
New phrase. New printout. Old printout in the shredder.

When

Evidence

Kit

Same hour

Devices

Re-unlock

Monthly

Usually no

  • Do not change it on cafe Wi-Fi for sport.
  • If passwordless unlock is on, test recovery before you drop the phrase.
  • Family seats still have their own masters.
  • RoboForm is the vault this password section is teaching.

Why this sits next to RoboForm

Whatever manager you use, the ceremony is the same. This site is about to talk about RoboForm more often, so the example lives here. Bitwarden and 1Password need the same drill.

A 30-day refund window is not a recovery kit.

Pros

  • +A known-bad master can die
  • +Devices come back into one story
  • +The kit matches reality again

Cons

  • −You can lock yourself out
  • −Old kits linger in drawers
  • −Family members will keep the old phrase

Rotate when it is real

Change on evidence. Update the kit. RoboForm is the house example. GUIDEORA cannot unlock you.

Editor take

A drill, not a hobby

Rotate the master after a real leak. Re-unlock devices. RoboForm is the example. Confirm live unlock options.

See RoboForm's current plan