You could do what I'm doing. Let the user set a password an…

You could do what I'm doing. Let the user set a password and store it encrypted on their device. Then, reencrypt it and store it on the server. When you need the password, get from device or prompt them and double encrypt it to match the one on the server.