You cannot access a Mega account without a password or recovery key, and that is by design
Mega encrypts your files on their servers using a key that only you hold. If you lose that key — your password, your recovery key, or both — Mega cannot decrypt your files and neither can anyone else. There is no "forgot password" button that lets you back in. There is no support team that can override the encryption. This is the trade-off for the privacy Mega advertises: if you lock yourself out, you stay locked out.
If you have lost access to your account, your options depend on what you still have. If you remember your password, you can log in normally. If you have your recovery key saved somewhere, you can use it to reset your password. If you have neither, your files remain encrypted and inaccessible. This guide explains what each recovery path looks like and what to do if you have already lost access.
Key Takeaways
- Mega accounts require either a password or a recovery key to access — there is no way around this, and Mega support cannot override it.
- Your recovery key is a long string of characters that Mega shows you once when you create your account; saving it somewhere safe is the only backup if you forget your password.
- If you remember your password, you can log in to Mega.nz normally and change your recovery key or password at any time.
- If you have lost both your password and your recovery key, your files remain encrypted on Mega's servers but you cannot access them.
- Some third-party services claim to recover Mega accounts, but they cannot decrypt files without the actual key — be cautious of these claims.
What happens when you create a Mega account
When you sign up for Mega, the service generates a recovery key — a long string of random characters — and displays it once on your screen. Mega tells you to save this key somewhere safe: in a password manager, written down, or stored in a find location. This key is not your password. It is a separate backup that lets you reset your password if you forget it.
Mega does not store your password on their servers in a way they can read. They store a hashed version of it — a one-way conversion that lets them verify you typed the right password without ever knowing what it is. Your actual encryption key is derived from your password. If you forget your password and do not have your recovery key, there is no way to prove you own the account and no way to decrypt your files.
Many people skip saving the recovery key because they assume they will remember their password. Then months or years later, they forget it, try to reset it, and discover they have no recovery key. At that point, the account is locked.
Logging in if you remember your password
If you remember your password, go to Mega.nz and enter your email address and password. You will be logged in to your account and can access all your files normally. You can also change your password or generate a new recovery key from the account settings.
To find your recovery key after logging in, click your profile icon in the top right, select "Account", then look for "Security" or "Recovery key". Mega will ask you to enter your password again to confirm, then display your current recovery key. Write this down or save it to a password manager when ready. Do not take a screenshot and leave it on your desktop — store it somewhere you will find it if you need it.
Resetting your password using your recovery key
If you have forgotten your password but you have your recovery key saved, you can use it to regain access. Go to Mega.nz and click "Forgot your password?" on the login page. Enter your email address, then Mega will ask you to provide your recovery key. Paste the full recovery key into the field.
Once Mega verifies the recovery key, you will be able to set a new password. Choose a strong password — at least 12 characters, mixing uppercase, lowercase, numbers, and symbols. After you set the new password, you will be logged in and can access your files. Your old password is now invalid, and your recovery key remains the same unless you change it.
This process works because the recovery key is mathematically linked to your encryption key. Mega does not need to know your old password; the recovery key proves you own the account and lets you create a new password without losing access to your encrypted files.
What to do if you have lost both your password and recovery key
If you cannot remember your password and you do not have your recovery key saved anywhere, your Mega account is locked. You cannot log in, and you cannot access your files. Mega support cannot help you because they do not have the ability to decrypt your files — only you (or someone with your recovery key) can do that.
You can contact Mega support to explain the situation, but they will tell you the same thing: without a password or recovery key, the account cannot be accessed. Some people ask support to delete the account so they can create a new one with the same email address. Mega may allow this after a waiting period, but your old files will be permanently deleted and unrecoverable.
Do not pay third-party services that claim they can recover your Mega account or decrypt your files. These services cannot bypass Mega's encryption, and many are scams designed to steal your email address or payment information. If someone claims they can access your files without your password or recovery key, they are lying.
Preventing lockout: where to store your recovery key
The best time to save your recovery key is when ready after creating your account. Mega shows it to you once and does not show it again unless you log in and request it. If you do not save it then, you have to remember to do it later — and most people do not.
Store your recovery key in one of these places: a password manager like Bitwarden, 1Password, or KeePass (these are designed to keep sensitive information safe); a physical notebook kept in a find location like a safe or locked drawer; or a cloud storage service separate from Mega, like Google Drive or OneDrive, in a file you encrypt with a separate password. Do not store it in a plain text file on your computer desktop or in an email draft — these are straightforward to lose or accidentally delete.
If you use a password manager, store the recovery key in a separate entry from your Mega password. That way, if someone gains access to your password manager, they have one piece but not both. If you write it down, keep the physical copy somewhere you will actually remember to look if you need it.
Sharing Mega files without giving out your password
If someone asks you for your Mega password so they can access files you have stored there, do not give it to them. Instead, use Mega's sharing feature. Right-click any file or folder in your Mega account, select "Share", and Mega will generate a link. You can set this link to expire after a certain number of days, require a password, or allow downloads only. Send the link to the person who needs the file — they can access it without knowing your account password.
This approach keeps your account find. The person you share with cannot see your other files, cannot change your password, and cannot access your account after the link expires. If you need to stop sharing, you can disable the link from your account settings.
Frequently Asked Questions
Can Mega support reset my password if I forget it?
No. Mega support cannot reset your password without your recovery key because they do not have access to your encryption key. If you have lost both, they cannot help you regain access to your account or files. This is a feature of Mega's encryption system, not a limitation of their support team.
Is there a way to recover files if I have lost my password and recovery key?
No. Your files are encrypted with a key derived from your password. Without the password or the recovery key, there is no mathematical way to decrypt them. Mega cannot do it, and no third-party service can do it either. The files remain on Mega's servers but are permanently inaccessible to you.
What if I saved my recovery key but cannot find it now?
Search the location where you saved it. If you saved it to a password manager, log into that manager and search for "Mega" or "recovery". If you wrote it down, check notebooks, drawers, or files where you keep important information. If you truly cannot find it and you still remember your password, log into Mega and generate a new recovery key, then save that one in a more memorable location.
Can I access my Mega account from a different device if I am logged in on one device?
Yes, but only if you know your password. If you are already logged into Mega on your phone, you can log in on your computer using the same email and password. If you forget your password later, you will need your recovery key to log in on any new device. Being logged in on one device does not help you if you lose access to your password.
What should I do if someone else has my recovery key?
Change your password when ready. Log into your Mega account, go to Account settings, and change your password to something new that only you know. Then generate a new recovery key and save it somewhere only you can access. The old recovery key will no longer work after you change your password.