Vault encryption is passphrase-based, so a standard email reset cannot decrypt it. This build does not implement recovery-key validation or vault re-encryption; the steps below are a walkthrough and do not change your vault.