Culvert VPNWhy a VPN account with no email needs a recovery phrase
A VPN account created without an email has nothing to reset a password against, so a twelve-word recovery phrase is the only way back in. Here is why.
An account with no email has nothing to send a reset link to, so a recovery phrase is the only thing that can prove you own it from a different phone. The phrase, usually twelve words, encodes the key the account was created from. Shown once, written down, it lets you sign in on a new device; lost, it cannot be replaced by the provider, because the provider never had it.
How an account exists without an email
A normal account is an email and a password stored on a server. You prove you own it by knowing the password, and if you forget, the email is the fallback.
A no-email account works the other way round. When the app is first opened, it asks the phone's secure hardware to create a key pair. The private half never leaves that hardware; the public half is sent to the provider and becomes the account. From then on, every request the app makes is signed by that key, and the server checks the signature. No password is typed, none is stored, and there is no email because nothing needs one.
That is how a free tier can be genuinely free of sign-up: the phone is the credential. The VPN without an email post explains what this changes about what the provider knows.
Where the phrase comes from
The weakness is obvious: if the credential is the phone, a new phone has no credential. The provider cannot help, because all it holds is a public key, and a public key cannot be turned back into the private one.
The fix is to give you a copy of the private key in a form you can write down. Twelve English words from a fixed list encode enough bits to reconstruct the key exactly, with a checksum so that a mistyped word is caught rather than producing the wrong key. The app shows the words once, at account creation, and does not keep them anywhere it could show again. From then on, the phrase and the phone's hardware are the two ways to sign as that account.
What the phrase does and does not protect
| Situation | Without the phrase | With the phrase |
|---|---|---|
| Same phone, app reinstalled | Depends on the phone; usually a new account | Restore the old account |
| New phone | New account | Restore the old account |
| Factory reset | New account | Restore the old account |
| Phone lost or stolen | The account stays on the lost phone | Restore on a new phone; the old phone still holds a copy |
| Phrase seen by someone else | Not applicable | They can sign in as you |
Two rows deserve attention. A lost phone still holds the key, so if the account matters to you, the safe move is to restore on the new phone and then delete the account from there, which invalidates the old key. And the phrase is the account: anyone who reads it can use it. Treat it like a password you cannot change, because that is what it is.
Why the provider cannot recover it
People ask support to "reset" a no-email account, and the honest answer is that there is nothing to reset against. The provider has a public key, a creation date, and whatever the account has done. It has no phrase, no private key, and no contact address. If it could recover the account for you, it could recover it for anyone who asked, which would make the account worthless as a credential.
This is a design choice, not a limitation. An account that the provider can hand to a caller is one that a convincing stranger can take over. The phrase puts that decision in your hands only.
Is it worth writing down?
For most free-tier users, no, and it is worth being honest about that. A free account with no email carries no subscription, no payment history and no saved settings that survive a reinstall anyway. Losing it means opening the app on the new phone and getting a fresh account, which takes about a second and costs nothing. Write the phrase down if you want the same account to persist across devices; otherwise let it go.
Premium is the case where continuity matters, because there is a subscription to restore, and that is why Premium asks for an email instead. Signing in with the email on a new phone brings the subscription with it; the process is in restoring a subscription on a new phone.
What the account does and does not hold
Whichever kind of account you have, it is worth knowing what is behind it. Culvert VPN does not log the sites you visit, your DNS queries or the contents of your traffic; its servers see only an opaque connection id, never the account; and it keeps your client IP address for up to 30 days for abuse handling, as described in the privacy policy. Deleting the account, with or without the phrase, is done in the app or by email, as set out at /data-deletion and in how to delete your VPN account.
Culvert VPN creates the free account from the phone's hardware key with no email, shows a twelve-word recovery phrase once that it cannot recover for you, and asks for an email only when you buy Premium; the app is on Google Play.
Questions people also ask
What if I lose the recovery phrase?
That account cannot be recovered by anyone, including the provider. On the free tier this costs you nothing; open the app on the new phone and it makes a fresh account with no history to lose.
Do I need the phrase to keep using the app on the same phone?
No. The key that identifies the account stays in the phone's secure hardware. The phrase is only for moving the account to a different phone, or after a factory reset.
Does Premium use a recovery phrase too?
No. Premium needs an email so the subscription can be restored on another phone by signing in, so the email replaces the phrase for that account.