# How can I change forgotten password?

**URL:** <https://discourse.joplinapp.org/t/how-can-i-change-forgotten-password/3544>\
**Category:** Support\
**Created:** [18 September 2019 09:49 UTC](https://discourse.joplinapp.org/t/how-can-i-change-forgotten-password/3544 "2019-09-18T09:49:12Z")\
**Posts on this page:** 1\
**Showing post:** 14

<div class="post-metadata">

**Author:** ![dpoulton](https://yyz2.discourse-cdn.com/flex028/user_avatar/discourse.joplinapp.org/dpoulton/32/29723_2.png) [@dpoulton](https://discourse.joplinapp.org/u/dpoulton)\
**Post date:** [15 December 2020 17:21 UTC](https://discourse.joplinapp.org/t/how-can-i-change-forgotten-password/3544/14 "2020-12-15T17:21:06Z")

</div>

The post you have replied to is over a year old now and [this **News** post from June 2020](https://discourse.joplinapp.org/t/new-editor-editable-attachments-dark-mode-support-and-more-in-latest-pre-release/9251) updates users with:

> **Support for system keychain on macOS and Windows**
> 
> One of the issues mentioned in the [security audit](https://www.patreon.com/posts/joplin-informal-35719724) was that certain sensitive settings, like Nextcloud or encryption passwords were saved unencrypted in the Joplin profile. This new release will make use of the system keychain when it is available and move the sensitive settings to it. You don’t need to do anything to make use of this feature, it is automatically enabled in this release.
> 
> Currently this is supported on macOS and Windows. It is disabled of course for the portable version, and is also not currently enabled for Linux due to a build issue and less consistent support than on macOS and Windows.

_(I have not looked to see if the Linux issue has also since been resolved)_

> [@ajay](#):
>
> Another subject related to this, does E2EE (as explained vs. as implemented) encrypt everything in the profile directory or not. And if not why...

With regards to E2EE, it is not a method of encrypting and securing the data on your local disk and never has been. It is there only to ensure that data transferred _off_ your system to a cloud storage provider cannot be read by that storage provider or anyone who gains access that storage provider's systems. Of course it also provides protection _in addition to_ HTTPS whilst in transit both to and from the storage provider.

From what I have seen, if you enable E2EE you will see two copies of each file in your **resources** folder; the "plain version", say `004864a886874b57a37cc6234760c448.png` and the encrypted version, say, `004864a886874b57a37cc6234760c448.crypted` which Joplin uses to send to the sync target. The notes in your _local_ Joplin database are unencrypted and there are unencrypted resource files (attachments) in your _local_ **resources** folder. However _all notes and resources_ are stored encrypted on the sync target.

Local encryption has been raised many times in the past. [This](https://discourse.joplinapp.org/t/are-local-notes-encrypted/10774) is just one of the many posts.

> [@ajay](#):
>
> ... But I will address this in a separate post.

If you _were_ thinking of requesting local encryption please have a search of this forum first as the pros & cons have been discussed many times. It is also somewhat covered in the [FAQ](https://joplinapp.org/faq/#could-there-be-a-password-to-restrict-access-to-joplin).

---

_[View the full topic](https://discourse.joplinapp.org/t/how-can-i-change-forgotten-password/3544)._