A method for recovering a password includes: obtaining a request code from
a data storage device, transmitting the request code to an external
authority that produces a recovery code from the request code, and using
the recovery code to recover a password and an encryption key from a
hidden area of the data storage device. An apparatus that can be used to
implement the method is also provided.