Use Forgot your password? on the sign-in page. It works even if your site can't send email yet.

With email set up

  1. On the sign-in page, click Forgot your password?
  2. Enter your email and press Send reset link.
  3. Open the link in the email. It works once and expires after an hour.
  4. Choose a new password of 12 to 100 characters.

Without email set up

Webfaze writes the reset link into the app's log instead, on a line starting [webfaze] SMTP not configured. Reset link for you@….

  • Hostinger: hPanel → your Node.js app → Logs.
  • cPanel: the log file in Setup Node.js App.
  • VPS: journalctl -u webfaze -n 50.

Open the link within the hour. For a limited time, only 3 links per address can be asked for, so wait a while if no new link appears.

With SSH access to the server

Run this in the folder with webfaze.cjs, using the same data folder and database settings as the site:

node webfaze.cjs reset-password --email=you@example.com --data-dir=/path/to/data

It prints a new password and signs out every session. Add --password=… to choose it, or --disable-2fa if you've lost your two-step sign-in device. Run it without --email to list the accounts.

Moved your sign-in page and forgot where? node webfaze.cjs login-path prints the current sign-in address.

Afterwards, set up Settings → Email so the next reset arrives by email.