All keys can be derived from a master password (in combination with the account name). You can at any time get all the private and public keys with the Key Generator tool, as long as you have the master password. The public keys can always be calculated from the private keys (based on the role), but not the other way around.

For now I would keep a copy of the very first master password, the currently (through the recovery request) set private owner key (or master password if you have) and the newest master password (that you are creating now). Of course, for making use of the private posting and active key it makes sense to directly store them for faster access.