account/sign-in-and-recovery.md

Sign-in and recovery

A sign-in method gives you access to your Nerudo account. Use a connected provider or a passkey to sign in. A provider is a service that confirms your identity, such as Google, Apple, GitHub, or Cloudflare.

Keep two or more sign-in methods. If one method stops, another method can give you access.

Connect a provider

1. Sign in to Nerudo.
2. Open Sign-in and recovery settings.
3. Select Connect for the provider that you want to use.
4. Complete sign-in with that provider.
5. If the provider asks for permission, examine the requested information.
6. Accept only if you want to connect that identity.
7. Make sure that Nerudo shows Connected for the provider.

Connect a provider from your existing account to keep the same account. Nerudo does not join accounts because their email addresses are the same.

Add a passkey

A passkey is a sign-in credential that a device or security key manages. An authenticator is the device or security key that holds the private credential. Nerudo keeps the public credential. It does not receive the private credential or your device PIN.

1. Open Sign-in and recovery settings.
2. Confirm your sign-in with a connected method.
3. Enter a description in Passkey name.
4. Select Add a passkey.
5. Complete the instructions from your browser and authenticator.
6. Make sure that the new passkey appears in the list.

You can add more than one passkey. To sign in later, select Continue with a passkey on the sign-in page.

Confirm your sign-in

Changes to account access require a sign-in confirmation from the last five minutes. Account data export and deletion also require this confirmation.

1. Open the confirmation area on the settings page.
2. Select a connected provider or passkey.
3. Complete the sign-in instructions.
4. Continue with the account change within five minutes.

The provider can reuse its session. A new password prompt is not always necessary. A passkey confirmation requires the authenticator to verify you.

Remove a sign-in method

1. Confirm your sign-in.
2. Select Disconnect for a provider or Remove for a passkey.
3. Examine the confirmation prompt.
4. Confirm only if another usable sign-in method is available.

Nerudo prevents removal of the last usable sign-in method. Provider disconnection in Nerudo does not delete your account at that provider.

Recovery limits

Recovery uses your other connected providers and passkeys. Nerudo does not issue recovery codes or email password-reset links at this time.

A GPG key does not give sign-in access. Use Sessions and activity to stop browser access that you no longer need.

Open a private repository

An account sign-in does not give access to every private repository. Your account must have the necessary repository permissions.

A share link gives read access to one repository. A personal link identifies a person with repository permissions. An earlier sign-in link can also open your account. Keep personal links and sign-in links secret.

1. Sign in to your Nerudo account.
2. Open the repository that you want to use.
3. If access fails, ask its maintainer to examine your repository permissions.

If a maintainer gives you a share or personal link, open that link to use its access.

A maintainer with the necessary administration credential can use these CLI commands:

Replace YOU and TRUNK_ID with the account and repository identifiers. Developer credentials do not authorize these administration commands.