Help center
Account security and recovery
Username/password accounts, passkeys, recovery codes, and active sessions without email.
Describes Sonic Weaver v6.46, released .
Why sign in
Guest editing and export stay free. Signing in adds durable Turso revisions, cross-device access to your projects, profiles, community, and notifications.
Recovery
Sonic Weaver sends no email. Save the recovery codes shown at signup and add a passkey. Codes are hashed, single-use, and replaced as a complete set.
- Use a passkey or username plus an unused recovery code at `/recover`.
- Recovery creates a short-lived HttpOnly session and never returns a reset token in JSON.
- Without a passkey, recovery code, or authenticated trusted session, the account cannot be self-recovered.
Sessions and admins
Security settings list active devices without exposing session tokens. Admins use the normal account session; privileged changes require a fresh passkey and create an immutable audit record.
Still have a question about this?
SW Agent answers from this article and the rest of our docs, and can do it for you with the site's own tools.
Help center
Keep going
Was this page helpful?
Anonymous. Only this page’s address and your yes/no are recorded, and only if you allowed analytics cookies.