Sign in and keep your account safe

Sign in with an email code, a passkey, GitHub or Google. Add more than one way, so losing one never locks you out.

Ways to sign in

Go to the sign-in page. You have four choices.

A first sign-in creates your account. An email code always works for your address, so you cannot lock yourself out.

Add a passkey

1. Open Settings. Under You, click Sign-in & passkeys.
2. Under Passkeys, click Add a passkey.
3. Follow your device's prompt.

You should see: "Passkey added." The account menu also has a Faster sign-in item that offers the same thing.

To remove one, click Remove next to it and confirm. You can still sign in with an email code.

Connect GitHub or Google

1. Open Settings, then Sign-in & passkeys.
2. Under Connected sign-ins, click Connect GitHub or Connect Google.

Click Disconnect to unlink one. Hawl keeps at least one way to sign in, so it refuses to remove your last one.

Confirm it's you

For sensitive actions, Hawl asks you to confirm it's you. If you have a passkey, a passkey sign-in or tap in the last 5 minutes counts. If you have none, any sign-in in the last 5 minutes counts. So you are often not asked at all. These actions ask:

• approving a new agent
• changing a role or removing a member
• trusting a sender or loosening a hold
• freezing or deleting a site
• revoking a connected app
• changing your email
• adding or removing a passkey
• connecting or disconnecting GitHub or Google
• deleting your account

The box is called Confirm it's you.

1. If you have a passkey, click Use my passkey. To use an email code instead, click Email me a code instead.
2. If you have no passkey, click Email me a code, type it and click Confirm. Add a passkey instead sets one up on the spot.

You should see: the action goes through. On a site settings page the box reads "Confirm it is you to make this change" and has one button, Confirm with passkey. Press the action again after it works. If you have no passkey there, sign in again with an email code and repeat the action.

Lost your passkey

1. On the sign-in page, click Email me a code.
2. Type the code.
3. Add a new passkey under Sign-in & passkeys.

You should see: you are signed in, and Hawl emails you and the owners of your sites. For the next 72 hours Hawl refuses these actions:

• changing your email
• changing a role
• deleting a site
• letting an agent in
• connecting ChatGPT or Claude.ai to a site

Changing your email starts the same 72 hours. Everything else keeps working.

See where you are signed in

1. Open Settings, then Sign-in & passkeys.
2. Under Where you're signed in, check each device, when it signed in and its IP address. Your current one says This device.
3. Click Sign out next to one you do not know.

Sign out everywhere else ends every other session. Sign out everywhere ends this one too.

If it didn't work

• "That code has expired": click Send a new code.
• "Too many tries": wait the time the page shows, then try again.
• No email: check spam, then ask for a new code.

Still stuck? Read Stuck? Start here. To manage your name, email and data, read Your account, setups and data.