Recovery login

Sign in without GitHub.

This is the screen the product exists for. If your GitHub account is banned, or you lost the device with your 2FA, this is how you still reach every repository.

• ✓ Email plus a single-use recovery code
• ✓ No OAuth, no GitHub session, no organisation access
• ✓ A password reset waits 24 hours and emails a cancel link

GitHub is a connection, never an identity. If signing in required GitHub, then the day you lose GitHub you would also lose the backup of the thing you lost.

Demo note. This account prints its recovery code on screen so the flow can be shown without a signup. In production, codes are generated once, shown once, and never stored in plaintext.