> ## Documentation Index
> Fetch the complete documentation index at: https://docs.buburuza.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Sign in and protect your account

> Use passwordless sign-in, manage your credentials and review sessions.

Buburuza uses passwordless account sign-in. There is no account login password to change or reset. These instructions cover the current web flow; mobile labels may differ. Use only the options shown by your app.

<a id="sign-in" />

## Sign in

1. Open the official Buburuza app from your usual trusted entry point.
2. Use the sign-in method offered for your existing account: a passkey or an email one-time code.
3. If an authenticator challenge appears, enter the current code for that account.
4. After signing in, check the selected personal or company space before continuing.

If a passkey is missing, check the device or password manager where it was saved. Use another method offered by the sign-in screen. Creating a second account does not recover the first one.

<a id="passkey" />

<a id="remove-passkey" />

## Manage passkeys

Open **Settings → Passkeys** to review your saved credentials. To add a passkey, follow the device prompt and check that the new entry appears. Before removing one, make sure you have another working sign-in method. A security change may require you to confirm your identity again.

<a id="authenticator" />

## Use an authenticator

Use the authenticator option shown in your security settings. Keep its setup key private and enter a current code to confirm setup. Repeated incorrect codes can temporarily prevent another attempt; wait for the time shown before retrying.

<a id="recover-access" />

## Recover access

Use a recovery-code option only when the app offers it for your account. Enter the code in the app, never in a support message. If the flow returns a replacement recovery code, save it securely. If no recovery option works, [contact support](/support).

<a id="sessions" />

<a id="mobile-session-control" />

## Review sessions

Open the sessions or security area and inspect the device and activity information. Select the session you intend to revoke. Read the action label carefully: ending another session and signing out everywhere have different effects.

<a id="change-master-password" />

<a id="mobile-password-signin" />

<a id="reset-mobile-login-password" />

<a id="change-app-pin" />

<a id="mobile-authenticator-setup" />

<a id="enable-mobile-biometrics" />

## Older mobile instructions

The restored password-login, password-reset and SMS-login instructions do not describe the current passwordless account flow and have been removed. A device unlock code or biometric prompt is separate from account sign-in and recovery. Follow your app's own device-security controls.

Never send support a one-time code, authenticator setup key, recovery code, private key or wallet recovery phrase.

For signup and verification, see [Onboarding and security](/onboarding-and-security).


## Related topics

- [Buburuza product guides](/guides/index.md)
- [Onboarding and Security](/onboarding-and-security.md)
- [Buburuza](/index.md)
- [Quickstart](/quickstart.md)
- [Teams and Spaces](/team.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.