If you forget your master password, your vault is permanently inaccessible. There is no recovery.

Your master password never leaves your device. All encryption happens in your browser using AES-256-GCM (WebCrypto API). The server stores only ciphertext.