Remote authentication and passwordless password reset

At least one of a storage device or storage disk, comprising instructions that, when executed, cause a client device to at least:

• authenticate a user of a credential management account that is to manage respective credentials respectively associated with user accounts;
• obtain a local storage key by decrypting an encrypted local storage key based on a cloud key, the cloud key obtained from a server responsive to the authentication of the user, the cloud key associated with the client device;
• decrypt a key bag with the local storage key, the key bag including a content encryption key and an encrypted first credential encrypted with the content encryption key, the encrypted first credential associated with the user;
• and
• decrypt the encrypted first credential with the content encryption key to obtain a first credential associated with a first user account managed by and different than the credential management account, the first credential to be obtained without the user supplying a master password associated with the credential management account.

A method comprising:

• authenticating a user of a credential management account that is to manage respective credentials respectively associated with user accounts;
• obtaining a local storage key by decrypting an encrypted local storage key based on a cloud key, the cloud key obtained from a server, the cloud key associated with a client device;
• decrypting a key bag with the local storage key, the key bag including a content encryption key and an encrypted first credential, the encrypted first credential encrypted with the content encryption key, the encrypted first credential associated with the user;
• and
• decrypting, by executing an instruction with processor circuitry, the encrypted first credential with the content encryption key to obtain a first credential associated with a first user account managed by and different than the credential management account, the first credential to be obtained without the user supplying a master password associated with the credential management account.