# Recover your account

If you forget your password, reset it by email. If your account requires a
passkey and you lose every passkey, use a recovery code.

## Reset your password by email

1. Open `/auth/recover` (**Forgot password?** on the sign-in page).
2. Enter your account's email address and choose **Send recovery link**.
3. Open the link in the email within 15 minutes.
4. Enter a new password of at least 12 characters, twice.

For your security, the page always says a link is on its way, whether or not
the address has an account. Requesting again replaces the earlier link.

Resetting your password signs out every session and revokes all your passkeys
and tokens, including CLI logins and SSH key access grants. Sign in with the
new password, then add passkeys and create tokens again.

Email recovery is not available when **Require a passkey** is on.

## Recover a passkey-only account

You need one of the recovery codes you saved from
[account settings](https://staging.git.cafe/docs/account/account-settings.md#recovery-codes).

1. Open `/auth/recover` and expand **Use a recovery code**.
2. Enter your email address, one code and a new password.

This uses up all your remaining codes, turns off **Require a passkey**, sets
the new password, and signs you out everywhere, revoking your passkeys and
tokens. Sign in, add new passkeys, and generate a new set of codes.
