Tell us the email on the account and we will send a link to set a new password.
Resetting does not lose your vault. Your 2FA secrets are encrypted with a key Latch holds — not one derived from your password — so your accounts and codes survive a reset untouched, and so does the API key once the address has been confirmed. The first reset confirms it and replaces the key, so nobody who signed up with your address before you keeps a working one. The flip side is the honest one: whoever can read that inbox can take the vault, so keep the mailbox itself locked down.