Master password
Your master password is the key your stored account credentials are encrypted with. When you save a username and password for an affiliate program account, Routy encrypts it with your master password — so nobody, including us, can read those credentials without it.
It is not your login password, and it is set once for the whole account rather than per person.
Status
The panel shows one of three states.
"Active" lasts a long time — it is not tied to your browser session. Once a team member enters the password, the account stays active until the password is changed or reset.
Entering the master password
Anyone on your team can enter it. If an integration stops running because the master password isn't active, whoever has it can open this panel, choose Enter master password, and everything resumes.
This is deliberate: you have to know the password to use it, so entering it proves nothing more than that the owner shared it with you.
What only the account owner can do
Three actions are restricted to the account owner — the person named as Owner under Settings → User Management → Account contacts:
- Change the master password
- Reset it
- Have it emailed
These either reveal the key or replace it, so a team member who was trusted with today's password can't quietly rotate it or mail themselves a copy. If you need one of them and you're not the owner, ask whoever is.
If your account has nobody named as Owner, all three are unavailable for everyone until an owner is set.
Change
Changing re-encrypts your stored credentials under the new password. Nothing is lost, and you don't need to re-enter anything afterwards. You'll be asked for the current password first.
Email it to me
Sends the master password to the account owner's registered email address. It always goes to the owner's own address — you can't send it anywhere else.
This works only while the status is Active, because it sends the password that's currently in use. It is not a way to recover a password nobody knows any more; for that, see Reset.
Reset
Reset is destructive. Saved account passwords cannot be decrypted without the current master password, so resetting removes them. Every account that signs in with a password then needs it entered again before its integration will run. API keys and client IDs and secrets are not affected.
Use it when the master password is genuinely lost.
Because it can't be undone, reset happens in two steps. You choose the new password, and we email a 4-digit confirmation code to the account owner. Typing that code back finishes the reset.
The code goes to the owner's registered email address, never to whoever asked for it. It expires after three minutes, and you can ask for a new one from the same screen.
If the account owner has no email address on file, we can't send the code and reset is unavailable until one is added.
Common questions
An integration says it can't read credentials. Check the status here. If it says Not active, enter the master password.
I changed the master password and an account still fails. Changing doesn't touch your credentials, so the account is failing for another reason — check that account's own status.
Can Routy support tell me my master password? No. We can't read it, which is the point of it. Staff can change or reset it for you, but cannot have it emailed to themselves.
Support is resetting it for me and has asked me for a code. That's expected. The confirmation code is emailed to your account owner even when a member of our staff starts the reset, so we can't go through with it without you.
The code hasn't arrived. Check it's the account owner's inbox you're looking at, not your own — they are often different people. Codes expire after three minutes, so request a fresh one rather than reusing an old email.