Offline Password Reset Guide

If you are locked out of your profile and need to reset your master password, follow these step-by-step instructions using the Offline Reset Protocol v3.0:

Step 1: Initialize the Reset on Your Extension

  1. Open the locked extension screen (lock.html).
  2. Click on the Forgot Password? (Offline Reset) button to open the reset wizard.
  3. Your browser will automatically generate a 12-character base32 session nonce prefixed by your device identifier (formatted as PFX-XXXX-XXXX-XXXX).

Step 2: Get the Challenge Code from the Portal

  1. Navigate to the official reset portal at browserlock-reset.iamtac.com.
  2. Log in using your registered email address.
  3. Enter your offline session code displayed in the extension into the portal.
  4. The portal will generate and provide you with an 8-character Challenge Code (which includes a built-in cryptographic checksum for error detection).

Step 3: Generate the Response Code

  1. Return to the extension lock screen and input the 8-character Challenge Code into the challenge field.
  2. Click Generate Response.
  3. The extension will instantly validate the challenge checksum, load your stored local ECDSA private key, and cryptographically sign the session context to produce a formatted Response Code.
  4. Dictate or copy this Response Code back into the online portal.

Step 4: Authorize and Finalize the Reset

  1. Once you submit the response code to the portal, it will compute and output a 12-character Reset Authorization Token.
  2. Copy and paste this token into the final authorization input field inside the extension.
  3. Click Authorize Reset.
  4. The extension will locally recompute and mathematically verify the expected authorization token. Once verified, your old password hash is securely wiped, allowing you to set a brand new master password.