Recovery codes and account recovery

Recovery codes are one-time emergency codes. Ravenstash shows them only when a new set is created, so save them immediately in a secure place away from the devices you normally use to sign in.

Save recovery codes safely

When Ravenstash displays a new set, copy it or download the PDF. I saved the codes remains unavailable until you complete at least one of those actions. Store the codes in a password manager, secure offline document, or another protected location.

• Each code works once.
• Ravenstash never emails the codes to you.
• Creating and confirming a replacement set permanently stops every older code from working.
• Do not send recovery codes to support or another person.

When a recovery code can help

Complete an extra sign-in check

First sign in with your password, Google, or GitHub. If Ravenstash then asks for a passkey or authenticator code, open Try another way, choose Can’t use any of these?, and enter an offline recovery code.

If you used the code because your authenticator is unavailable, Ravenstash offers to replace the authenticator after sign-in.

Confirm an important account change

When Ravenstash asks you to confirm an important change, first try the recommended choice or Try another way. If none are available, choose Can’t use any of these? → Use an offline recovery code.

This consumes one code and lets the pending change continue. Review your remaining sign-in choices and recovery-code count afterwards.

If the account has no recovery-code set, this view never suggests a code. A password-only account can open password reset for the signed-in email; an account that can confirm only through a linked account receives support guidance instead.

Replace lost passkeys on an account without a password

This special recovery is only for a passwordless account whose passkeys are no longer available.

1. Open Can’t sign in? from the Ravenstash sign-in page.
2. Choose I lost my passkeys and my account has no password.
3. Enter the Ravenstash account email and one unused recovery code.
4. Create a replacement passkey with a device you control.
5. Save the new recovery-code set.
6. Review the account’s remaining passkeys from Security settings.

The recovery code does not open the account by itself. You must successfully create the replacement passkey. When recovery completes, Ravenstash signs out older browsers and terminals and replaces the old recovery codes.

Reset a forgotten password

Open Can’t sign in? → I want to reset my password, enter the account email, and follow the link Ravenstash sends.

Password reset does not remove passkeys, the authenticator app, or extra verification. After setting a new password, use one of those existing choices—or a recovery code—if Ravenstash asks for another check.

A password-reset email is not sent for an account that has no password. Use an enabled Google or GitHub sign-in, an available passkey, or the passwordless recovery steps above.

Lost authenticator app

There is no separate lost authenticator choice on the recovery page. Start normal sign-in with your password, Google, or GitHub and use a passkey or open Try another way → Can’t use any of these? for a recovery code when the extra verification screen appears.

When self-service recovery is unavailable

If a passwordless account has lost every passkey and every recovery code, Ravenstash does not provide a shortcut around those protections. Contact [email protected] for a custom account review. Support may require additional evidence and cannot promise that access can be restored.

If Ravenstash temporarily pauses recovery attempts, wait for the time shown in the message before trying again. Repeated attempts do not shorten the wait.