🦆 Recovery Guide
Recover your Spaceduckling account
Lost access? We've got you. Choose your situation below for exact next-action steps. Most recoveries take under 2 minutes.
Forgot your password
Your account is active — you just need to set a new password using your verified email address.
1
Go to the sign-in pageVisit auth.html and click the Forgot password? link below the sign-in form.
2
Enter your email addressType the email you used when you hatched your duckling. A 6-digit reset code will be sent to it.
3
Check your inbox and enter the codeThe code arrives within 60 seconds. Enter it on the reset form. Codes expire after 15 minutes.
4
Set a new strong passwordMust include at least 8 characters, one uppercase letter, and one number. You'll be signed in automatically.
Code not arriving? Check your spam or junk folder. If your inbox is at a disposable or relay address, note that Spaceduckling blocks disposable-email domains — contact support to migrate your address.
Lost or expired OTP
Your email or phone OTP code didn't arrive, expired before you used it, or you missed the verification window.
1
Email OTP — go to hatch.htmlVisit hatch.html and enter your email again. Click Resend email to receive a fresh 6-digit code. Resend is rate-limited to once every 60 seconds.
2
Phone OTP — wait for the timerOn the phone-verify step, the resend button becomes active after 60 seconds. Tap it to receive a new SMS. If SMS is delayed, wait up to 90 seconds before retrying.
3
Check for "already confirmed" stateIf your account is already confirmed but you lost your session, go to auth.html and sign in normally. The OTP step will be skipped.
OTPs expire after 15 minutes. If your code expired, just request a new one. Multiple failed attempts within 10 minutes may trigger a temporary cooldown — wait and try again.
Locked account
Too many failed sign-in attempts triggered a temporary lock, or your account was flagged for suspicious activity.
1
Wait 10–15 minutesTemporary locks from failed attempts auto-release after a short cooldown. Do not continue retrying — additional attempts extend the lock.
2
Check your email for an unlock noticeIf your account was locked for security reasons (not just failed attempts), Spaceduckling will send a notification to your registered email with unlock instructions.
3
Reset your password to force an unlockUsing the password reset flow (see Forgot password above) re-establishes your credentials and clears the lock on most lock types.
4
Still locked? Contact supportIf your lock persists after a password reset, contact the support team using the link below. Include your registered email address.
Security lock? If you received an unexpected lock notification that you didn't trigger, your credentials may have been compromised. Use the reset flow immediately and enable a passkey on your next sign-in.
Paused account
You (or a session on your behalf) paused your duckling account. All data is preserved — no identity or certificate was lost.
1
Go to the sign-in pageVisit auth.html and enter your email and password as normal.
2
Look for the "Account paused" amber bannerWhen the system detects a PAUSED status on sign-in, an amber banner appears with a Reactivate account button.
3
Click "Reactivate account"This sends a reactivation request that re-enables your Cognito identity and sets your duckling status back to ACTIVE. You'll be signed in automatically on success.
Your data is safe. Pausing an account is a soft hold — no duckling data, birth certificate, or agent bonds are removed. Everything picks up where you left off after reactivation.
Deleted account
Account deletion marks the duckling as permanently removed and disables the Cognito identity. This action cannot be automatically reversed.
1
Confirm the deletion was intentionalAccount deletion requires typing
DELETE and entering your password in a confirmation modal. If you believe this happened without your consent, contact support immediately.2
Check if you exported a GDPR bundleIf you downloaded your
my-data-YYYY-MM-DD.json export before deleting, you retain all your identity data for personal records.3
Create a fresh ducklingYou can hatch a new duckling with the same email address (or a new one) at hatch.html. Previous birth certificates and trust history cannot be restored.
4
Contact support for exceptional circumstancesIn certain circumstances (e.g., accidental deletion within 24 hours), the support team may be able to assist. Contact us with your registered email and the timestamp of deletion.
Deletion is permanent. DynamoDB records are soft-deleted (status=DELETED) and Cognito identities are disabled. After 30 days, records may be purged in compliance with our data retention policy. Contact support promptly for recovery requests.
🛟
Still stuck? We can help.
If none of the above paths resolved your issue, reach out to the support team. Include your registered email address and a brief description of the problem for the fastest response.
Account Recovery Guide — Spaceduckling Galaxy 1.1