WhaleTodo

Account recovery and your database

Authentication and data stay in your own Supabase project. Use these paths to change a password, recover access, connect another device, upgrade the database or delete an account.

While signed in

Open Settings → Account and database. Changing your password or signing out other devices requires your current password. Choose a new password of at least 16 characters and update your password manager. Signing out other devices revokes their refresh sessions; existing access tokens remain valid until they expire.

Forgot your password?

WhaleTodo usernames use virtual email identifiers, so email recovery is unavailable. A Supabase project owner can reset the original account’s password while preserving its ID and tasks. Do not delete the account or create a replacement with the same name.

  1. On a trusted computer, sign in to the Supabase dashboard and select the project containing your tasks.
  2. Copy its Project URL from Connect. Find its Secret key in Settings → API Keys, or the legacy service_role key. Recovery requires project administrator privileges; a publishable key cannot reset another account’s password.
  3. Download the recovery tool (Python source). You need Python 3. You can inspect the file in a text editor first. Open a terminal in its folder and run python3 whaletodo-account-recovery.py.
  4. Enter your project URL and existing WhaleTodo username, then retype the complete project URL to confirm the destination before entering the administrator key and new password. Key and password inputs are hidden and are not saved to files or shell history.
  5. After the original account is found, type its username again to confirm. Once the reset succeeds, sign in to the app with the same project and username, using your new password.

The tool runs on your computer and calls your own project’s Supabase Auth admin API. It does not send credentials to WhaleTodo servers. This web page has no credential form. Keep administrator keys private; do not enter one in the app’s publishable-key field or send it to support.

If you are not the project administrator, contact its owner. If you also lose access to the Supabase dashboard account, restore that access first. WhaleTodo cannot bypass your project’s access controls.

Another device or a database upgrade

To connect another device, choose existing data, enter the same project URL and public key, and sign in to your existing account. Do not create another project. Your Supabase dashboard account manages the project; your WhaleTodo account accesses tasks.

Check the database configuration in account settings. If an upgrade is needed, copy the script supplied by the app, run it in that project’s SQL Editor, then check again. The transaction preserves existing accounts and tasks and can be rerun. Keep RLS enabled and image storage private.

Manage backups in your own project. Before migration or deletion, confirm that your Supabase database backup is recoverable. Database backups do not include Storage image bytes; back up those files separately.

Delete your account

Choose account deletion in settings and confirm with your current password and the exact confirmation phrase shown. This permanently removes your account and its tasks, images, AI conversations and settings in the project. It leaves the Supabase project and other accounts intact.

Deletion first blocks new writes for this account, then removes images and account data. If interrupted, sign in again and retry deletion; completed deletions cannot be undone. The current device clears this account’s cache and upload staging. Other offline devices and separately saved backups are not remotely erased.