When the application is first launched it prompts the user to create a password. From this password, a unique encryption key is derived. A second encryption key is generated randomly, which will be used to encrypt all sensitive information stored by the application. This second key is encrypted with the key derived from the password, and stored in the windows registry for later retrieval.

If the password is lost, then the stored key cannot be decrypted, and any sensitive information stored by the application will be inaccessible.

The backup Key option allows admins to backup the key used for data encryption, in case the password is ever lost or forgotten. This backup file should be stored in a safe location, away from the computer this application is stored on, and only returned to the machine temporarily, if it is needed for recovery.

During login, an "forgot / change password" option is presented. If selected, you will be prompted to supply the export file created by the backup function. The user will then be prompted to supply a new password, and the restored key will be encrypted with the new password, instead of the one used previously.