I'm implementing field level end to end encryption (e2ee) to customer data stored in a DB, this DB is using by a RESTFUL web application (angular) through a web API.
API generates an encryption key per user and it symmetrically encrypts that encryption key with the user's raw password+credentials and store in a DB.
Every time user should provide the password to web API to get his encryption key decrypted and using that key, the web API decrypts customer data and provides to RESTFUL WebUI.
When in a situation which customer looses his password he is getting unable to access his data.
Is there any solution to this lost password scenario problem? However the e2ee should always be available and our web API/UI staff/developers/management should have zero knowledge of customer data.