# PIN changes and recovery

Change your PIN or recover access with Touch ID or a recovery code.

## Change a known PIN

1. Open **Settings → Security → Change PIN**.
2. Enter your current PIN.
3. Enter and confirm the new four-digit PIN.
4. Select **Change PIN** and store the new recovery code.

Changing the PIN locks secrets and replaces the previous recovery code. Use the new PIN the next time you unlock a project's Secrets section.

## Recover a forgotten PIN

Choose **Forgot PIN?** from the unlock flow. Orbit shows the methods available on your device, such as **Use Touch ID** or **Use recovery code**.

Enter and confirm a new PIN in the recovery form. If you chose Touch ID, select **Verify with Touch ID** and complete the system verification. If you chose a recovery code, enter the saved code and select **Reset PIN**.

Store the replacement recovery code shown after recovery, then unlock Secrets with your new PIN. Your saved secrets are kept.

A recovery code is not the same as a Pro licence key. Store it where you can find it even if you cannot unlock Orbit's secrets.

## When no recovery method is available

If you still remember the PIN but have no recovery code, change your PIN in Security settings to generate one. If you cannot use a recovery method and no longer know the PIN, the remaining reset option deletes saved vault values.

## Reset all project secrets

**Reset secrets** is a last resort. It permanently deletes saved secrets from **every project**, then lets you choose a new PIN. You must type **DELETE ALL SECRETS** to confirm.

Projects, documents, tasks, and provider connection credentials are unaffected by this reset. The removed secret values cannot be recovered from a normal workspace ZIP, because those archives exclude the vault. Before resetting, check whether you have the credentials in their original services or a separately saved .env export.