1 files changed, 4 insertions, 1 deletions
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js b/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js
index 09c4acf..8e67e20 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js
@@ -683,9 +683,12 @@ export function ResetPasswordPage({ onLogin }) {
       await _storeRecoveryKey(session.recoveryKey);
       setPhase('working');
       const auth = loadAuth() || {};
+      // The sign-in above derived the key for the new passphrase; the bundles
+      // are still sealed under the old one, so connect opens the recovery copy
+      // and they are sealed again under this key.
       const r = await window.MeshBayTransport.rewrapAllNodes({
         hubUrl: HUB, token: auth.token, username: name, userId: auth.userId,
-        newPassphrase: password, recoveryKey: mnemonic,
+        bundleKey: session.bundleKey, recoveryKey: mnemonic,
         onProgress: setProgress,
       });
       setResult(r);