Quote from: "greg"So it's only the scenario where you've forgotten both the master password + folder password that the data is permanently unretrievable.
Which is reassuring.
That leaves just the converse risk - whether someone could unlock the folders if they had access to the user account. If someone has the user account password, and is thereby able to login to the account, they will be able to reset the master password; I presume in that case they will not be able to use this checkbox route to unlock folders set when the previous master password applied?