Create an account and sign in
Ravenstash gives you several ways to sign in. You can keep more than one available so losing a device or access to Google or GitHub does not automatically lock you out.
Create an account
Section titled “Create an account”Create your Ravenstash account with an email address and password, Google, or GitHub. If Ravenstash asks you to verify your email, open the message it sends and follow the verification link before signing in.
Your user account owns your personal settings and can also belong to Ravenstash organizations. Do not create a second account when you only need another way to sign in; connect the additional Google or GitHub account from Profile settings instead.
Choose how to sign in
Section titled “Choose how to sign in”| Choice | What happens |
|---|---|
| Password | Enter your Ravenstash email and password. If your account has extra verification enabled, complete one more check. |
| Sign in to the Google account that you connected to Ravenstash and allowed for sign-in. | |
| GitHub | Sign in to the GitHub account that you connected to Ravenstash and allowed for sign-in. |
| Passkey | Approve sign-in with your device unlock, fingerprint, face, or security key. You do not enter a Ravenstash password. |
A Google or GitHub account must already be connected to the same Ravenstash account and allowed for sign-in. Ravenstash does not join accounts only because their email addresses match.
Google and GitHub sign-in is attached to your individual Ravenstash account, so an organization invitation does not replace the sign-in methods you choose.
When Ravenstash asks for one more check
Section titled “When Ravenstash asks for one more check”Password sign-in is automatically protected after you add a passkey or authenticator app. You can also choose to protect Google and GitHub sign-in in the same way. This is often called two-factor authentication, or 2FA. In Ravenstash, the screen describes it simply as another verification step.
After your password, Google, or GitHub sign-in succeeds, Ravenstash may ask you to verify with:
- a passkey; or
- a six-digit code from your authenticator app.
If only one method is available, Ravenstash opens it directly. If both are available, Passkey is shown first and Try another way opens the Authenticator app choice. Entering the sixth authenticator digit submits the code automatically.
If neither normal method can be used, open Try another way, choose Can’t use any of these?, and enter an offline recovery code. Each recovery code works once.
Confirm important account changes
Section titled “Confirm important account changes”Ravenstash may ask you to confirm it is really you before changing an email address, password, passkey, authenticator, connected account, or recovery codes. Soon after sign-in, your existing confirmation is normally enough. Later, Ravenstash shows one recommended option and a Try another way link for the others.
This confirmation is separate from signing in. It accepts any available passkey, connected Google account, password, or authenticator code. GitHub confirmation is reserved for a passwordless GitHub-only account with no local alternative. An offline recovery code is available behind Try another way → Can’t use any of these? only when the account has recovery codes. Otherwise Ravenstash offers password reset for a password-only account or support guidance when a linked account is the only option.
If you cannot sign in
Section titled “If you cannot sign in”Open Can’t sign in? from the sign-in page.
- If you forgot a password, request a password-reset email.
- If your account has no password and you lost your passkeys, use an unused recovery code to create a replacement passkey.
- If you lost an authenticator app, return to normal sign-in and use the recovery-code choice only when the extra verification screen appears.
Resetting a password does not turn off extra verification. You may still need a passkey, authenticator code, or recovery code after entering the new password.
For the recovery choices and their limits, read Recovery codes and account recovery.