Signing in

Wyrm needs a free wyrmflow.com account. The first time you launch it you see Sign in to Wyrm, and the app opens your repositories only after you’ve signed in. Signing in for the first time creates the account. There is nothing to pay for public repositories (see Account, trial & billing).

You can sign in with an email code or with GitHub, Google, GitLab or Apple.

With an email code

This stays inside the app; no browser is involved.

1. Type your address into Email and click Continue with email.
2. Wyrm shows Check your email. Enter the code from the email and click Verify & sign in.

Didn’t get it? Check your spam folder, or click Resend code. If you open the link in that email instead of typing the code, the website tells you that the sign-in was started in the app and asks you to enter the code there.

With GitHub, Google, GitLab or Apple

1. Click Continue with GitHub (or Google, GitLab, Apple). Wyrm opens your browser on wyrmflow.com, which passes you straight to the provider’s own login.
2. The app now shows Finishing in your browser with a Security code such as 3F9A-0C1B-77D2.
3. After you log in with the provider, the browser shows Sign in to the Wyrm app? with a code of its own. Compare the two codes. Click Continue to Wyrm only if they match and you started the sign-in yourself. If they don’t match, click Cancel.
4. The page changes to Opening Wyrm… and your browser may ask whether to open Wyrm. Allow it. The app signs you in and shows Signed in.

The code check protects you from someone sending you a sign-in link they started: their code would not match the one in your window. The tokens travel back encrypted to a key your copy of Wyrm made for this one attempt, so another app can’t use them.

If the browser doesn’t open the app

Some browsers block wyrmflow:// links, or the prompt gets dismissed. You can finish by hand:

1. On the Opening Wyrm… page, find Didn’t open? and click Copy next to the long link in the box.
2. Back in Wyrm, under Didn’t get redirected?, paste it into Paste the code from your browser and click Continue.

The pasted code works only in the same waiting window and within 10 minutes. Reopen browser and Cancel start a new attempt with a new security code, so an older code is then rejected with “That doesn’t look like a Wyrm sign-in code.” Copy the newest one, or start again.

Where your session is stored

Wyrm keeps your session in the macOS keychain, next to the tokens for any GitHub or GitLab accounts you connect. Nothing is stored in plain files. Release builds use the data-protection keychain, so updates shouldn’t ask for your keychain password.

Signing out

Open Settings… (⌘,) → Account and click Sign out. Wyrm asks you to confirm; after that it needs a new sign-in before you can keep working. Signing out removes the Wyrm session only. Connected GitHub and GitLab accounts stay connected.

Problems?

See Troubleshooting → Sign-in.