Recover your account#

If you forget your password, reset it by email. If your account requires a passkey and you lose every passkey, use a recovery code.

Reset your password by email#

1. Open /auth/recover (Forgot password? on the sign-in page).
2. Enter your account's email address and choose Send recovery link.
3. Open the link in the email within 15 minutes.
4. Enter a new password of at least 12 characters, twice.

For your security, the page always says a link is on its way, whether or not the address has an account. Requesting again replaces the earlier link.

Resetting your password signs out every session and revokes all your passkeys and tokens, including CLI logins and SSH key access grants. Sign in with the new password, then add passkeys and create tokens again.

Email recovery is not available when Require a passkey is on.

Recover a passkey-only account#

You need one of the recovery codes you saved from account settings.

1. Open /auth/recover and expand Use a recovery code.
2. Enter your email address, one code and a new password.

This uses up all your remaining codes, turns off Require a passkey, sets the new password, and signs you out everywhere, revoking your passkeys and tokens. Sign in, add new passkeys, and generate a new set of codes.