Sign in and keep your account secure
Sign in with a password, an email code or Google, reset a password, and manage sessions, connected apps and security settings.
Updated
You can sign in to Wavemaker with a password, a one-time code sent to your email, or Google. Your sign-in, sessions and connected apps are managed under Settings › Account and security.
Create an account
- Open Sign in and select Create an account.
- Enter your email, check the box to agree to the current policies, and select Send verification email.
- Open the link in the email. It expires after 30 minutes and works once.
- Choose a password of at least 16 characters, check the agreement box again, and select Verify and start creating.
You are signed in, and a message shows your starter credits and the date they expire. To sign up with Google instead, select Continue with Google and agree to the policies on Finish creating your account. If the verification email doesn't arrive, select Resend email. Wait at least 60 seconds between requests.
Ways to sign in
| Method | How it works |
|---|---|
| Password | Enter your Email or username and Password, then Sign in. |
| Email code | Select Email me a sign-in code. Wavemaker emails a six-digit code to your verified address. It expires in 10 minutes and works once. |
| Select Continue with Google and sign in with your Google account. |
The sign-in page shows only the methods that are available. Wavemaker can turn a method off for a single account; signing in with it then says the method is turned off for this account.
Sign in with an email code
- On the sign-in page, select Email me a sign-in code.
- Enter your email and select Email me a sign-in code.
- Enter the six-digit code from the email and select Sign in.
The code goes only to a verified email address on an account that is still open. Wavemaker sends at most one code a minute to the same account, so wait before asking again and use the newest code. A code that has expired or was already used says so; request a new one.
Limits on sign-in attempts
| Action | Limit |
|---|---|
| Password sign-in | 20 attempts from one network in 15 minutes |
| Sign-up, reset, email code and verification requests | 8 per email address and 30 per network in 15 minutes, for each kind of request |
| Password check in Account and security | 10 attempts from one network in 15 minutes |
Every request counts toward a limit, not only failed ones. Past the password sign-in limit you see "Too many sign-in attempts; try again later"; past the others, "Too many attempts; try again later". Wait up to 15 minutes, then try once more. A wrong email or password says "Email or password is incorrect".
Reset your password
- On the sign-in page, select Forgot your password?
- Enter your email and select Email me a link.
- Open the link in the email within 30 minutes. It works once.
- Choose a new password and select Set your password.
- Sign in with the new password.
Wavemaker sends the link only if the email belongs to a verified account that can reset its password, and the page reads the same either way.
How long you stay signed in
A browser session lasts 12 hours after you last used it, and never more than 7 days after you signed in. After that, sign in again. If a session ends while you work, the sign-in page says You were signed out and takes you back to the page you were on, with any unsent brief.
If Wavemaker can't confirm your sign-in, you see Could not confirm your sign-in with Try again. During an update you see Wavemaker is updating; the page opens by itself when Wavemaker answers again, usually within a minute.
Account and security
Open Account and security to manage:
- Email & sign-in: your email, whether it is Verified, and your sign-in methods.
- Change email: enter the new address and your current password, then select Verify new email. The new address takes effect only after you open the link sent to it.
- Active sessions: every browser signed in to your account, its workspace and when it expires. Select Sign out to end one. This browser marks the one you are using.
- Change password: enter your current and new password. Use at least 16 characters.
- Google: Connect Google or Disconnect Google. To disconnect Google from an account without a password, set one first with Forgot your password?.
- Sign out everywhere: enter your password and select Sign out and revoke all app access.
- Security activity: security changes on your account, such as a changed password or a session you signed out. Select Older security activity to see more.
Multi-factor sign-in and passkeys are not available yet.
Connected apps and credentials
Apps and agents you authorize, such as an MCP client or the Wavemaker CLI, appear in Connections under App grants, with their access, expiry and status. Select Revoke grant to cut one off. When an app asks for access, Wavemaker shows what it is requesting; approve only apps you trust.
API keys and other developer credentials are created under Developer setup in Connections. See Client credentials. Starter credits can't be spent through an API key or a connected app until the workspace has paid. See Credits.
If something looks wrong
- Open Account and security and review Active sessions and Security activity.
- Sign out any session you don't recognize, or use Sign out everywhere.
- Change your password.
- Check App grants in Connections and revoke anything you don't recognize.
- Email [email protected] about any suspected unauthorized access.
If you can't sign in at all, reset your password from the sign-in page or use an email code. For anything else, contact support.
Related guides
Account and workspaces · Your data and privacy · Policies and agreements · Client credentials