From 99d825c88d2b74f5126c9e8d0c58598dd8dd4579 Mon Sep 17 00:00:00 2001
From: jolah1 <jokunlade@gmail.com>
Date: Sat, 4 Jul 2026 10:06:22 +0100
Subject: [PATCH] fix(web): tell the truth about forgotten passwords

- Terms: the old line implied the recovery file rescues a forgotten
  password. It can't; it opens with the same password. Now states the
  real fallback: the inheritance path (heir claim, or the owner's own
  copy of the heir file after the waiting period).
- Landing FAQ: new "What if I forget my password?" answer - you lose
  time, not money - and the lost-device answer no longer tells easy
  setup owners to back up a seed phrase they were never shown.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 ghostkey-web/src/Landing.tsx | 8 ++++++--
 ghostkey-web/src/Legal.tsx   | 7 +++++--
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/ghostkey-web/src/Landing.tsx b/ghostkey-web/src/Landing.tsx
index c1b565b..a7b565b 100644
--- a/ghostkey-web/src/Landing.tsx
+++ b/ghostkey-web/src/Landing.tsx
@@ -473,8 +473,12 @@ function Mark({ v }: { v: "yes" | "partial" | "no" }) {
 
 const FAQS = [
   {
-    q: "What happens if I lose access to my wallet?",
-    a: "Treat the GhostKey vault like any other Bitcoin wallet and back up your seed phrase. If you lose both your wallet and your backup, no one can recover the funds. That includes us. This is the trade-off of true self-custody.",
+    q: "What happens if I lose my phone or computer?",
+    a: "Nothing is tied to one device. Sign in from any browser with your email and password and your vault is right there. For a deeper emergency, your recovery file reaches the money without GhostKey at all, so keep a copy of it somewhere safe. If you connected your own wallet instead of using easy setup, back up its seed phrase like always.",
+  },
+  {
+    q: "What if I forget my password?",
+    a: "You lose time, not money. There is no reset, because we never see your password. But the plan still works without it: your heir's claim doesn't need your password, and you also hold your heir's file and its unlock code, so once the waiting period passes you can open that file yourself and move the funds to a new wallet. A password manager is still the best protection.",
   },
   {
     q: "Can I change my heir after creating a vault?",
diff --git a/ghostkey-web/src/Legal.tsx b/ghostkey-web/src/Legal.tsx
index 8d8cbaa..8d3e945 100644
--- a/ghostkey-web/src/Legal.tsx
+++ b/ghostkey-web/src/Legal.tsx
@@ -148,8 +148,11 @@ export function TermsPage() {
         <ul role="list" className="list-disc space-y-1.5 pl-5">
           <li>
             <strong>Your password.</strong> We never see it and cannot
-            reset it. Losing both your password and your recovery file can
-            mean losing access to your bitcoin permanently.
+            reset it. Your recovery file opens with this same password, so
+            it cannot rescue a forgotten one. If you forget your password,
+            the funds remain reachable only through the inheritance path:
+            your heir's claim, or your own copy of your heir's file once
+            the waiting period has passed.
           </li>
           <li>
             <strong>Your emergency recovery file.</strong> Keep a copy