They surely can reset master passwords: See
My first impression is that if they are able to reset master passwords, they have to be able to decrypt the vault and reencrypt them with a new key derived from the new masterpassword. Or am I missing something here?
SOCIAL SHARE CARD GENERATOR