What is the primary phone?
The primary phone is your trusted Wavo phone session. It can create or sign in to your account and can approve new computers. Wavo Web on a computer is a linked session, not a separate account.
Wavo uses a phone-first device model. Your Android phone or iPhone is the primary place where you create your account, approve computers, review linked sessions and control how long each computer can use Wavo.
The primary phone is your trusted Wavo phone session. It can create or sign in to your account and can approve new computers. Wavo Web on a computer is a linked session, not a separate account.
It reduces password exposure on shared or public computers. A computer receives access only after the signed-in phone approves the request. You can later pause, lock, rename, limit or sign out that computer from the phone.
You can keep up to ten linked computer sessions active on one Wavo account. They can remain signed in at the same time unless you set an expiry, daily limit, temporary pause or permanent lock.
Account creation is intentionally phone-only in this release.
Visit Wavo from your phone. The registration form is served only to a phone browser. On a computer, Wavo shows the linked-device login instead.
Your username is the identity people can use to find you. Choose it carefully and create a strong Wavo password.
This phone becomes a trusted primary-phone session and can approve future linked computers.
The QR code on Wavo Web stays valid for three minutes. A QR request can be used only for the browser that created it.
The computer shows a large Wavo QR code and a a clean QR code with no visible countdown. Do not share a screenshot of this code.
On your signed-in primary phone, open the three-dot menu and choose Linked devices.
Wavo asks you to re-enter your Wavo password before the scanner opens. This prevents somebody holding an unlocked phone from silently adding a computer.
Scan the QR, give the computer a recognizable name, optionally set an automatic sign-out time and choose a daily usage limit.
When the phone approves it, Wavo Web finishes sign-in automatically. A hard refresh does not remove the linked session.
If the camera is unavailable, use an 8-character linking code.
Choose Login with username, enter your Wavo username and generate the code. The computer waits for approval from your phone.
Open Linked devices, choose Enter linking code, verify your password and enter the eight characters shown on the computer.
The code expires quickly and is tied to a single browser request. If it expires, generate a new code. Never send a linking code to another person.
Each linked computer has its own independent policy.
Use a name you recognize instantly, such as “Reception PC”, “Work laptop” or “Home desktop”.
Set access to expire automatically. When the expiry is reached, the linked session is revoked and must be linked again.
Limit how many minutes the computer may actively use Wavo each UTC day. When the daily limit is reached, access is blocked until the next day.
Pause the computer for one hour or twenty-four hours. The session remains linked and can resume after the pause.
Lock a linked computer indefinitely. The browser stops receiving authenticated Wavo access until you unlock it from the phone.
Revoke a computer immediately. Its session token becomes unusable, even if the page is refreshed or reopened.
A new QR login request is valid for three minutes while the computer is waiting. When it expires, Wavo shows a reload state; if you do nothing, a fresh QR appears automatically after 30 seconds.
The desktop request is bound to a browser fingerprint derived from server-observed browser details. A different browser cannot claim the same desktop request.
New computer approval requires a fresh Wavo-password verification on the primary phone.
After a browser claims an approved request, that request is marked claimed and cannot create another computer session.
Linked-device management APIs require a primary-phone session. Linked computer sessions are not permitted to use the device-control API.
Expiry, pause, permanent lock and daily-use limits are evaluated on authenticated requests, not only hidden in the interface.
A normal website cannot directly read or validate your phone's operating-system PIN or fingerprint. Wavo currently uses server-side Wavo-password re-verification. Native device biometrics can be added securely through enrolled platform passkeys/WebAuthn or a native mobile application; simply detecting “fingerprint” from JavaScript would not be a secure substitute.
Try these checks in order.
Increase screen brightness on the computer, keep the whole QR inside the scan frame, move the phone slightly farther away, clean the phone camera lens, and avoid reflections. If the browser does not support automatic QR detection, use the 8-character linking code instead.
A Wavo Web QR stays valid for three minutes. When it expires, select the reload control to refresh it immediately, or wait 30 seconds and Wavo will generate a fresh QR automatically. If you already scanned successfully and are naming the device, Wavo gives the phone a short protected review window so the request does not disappear while you finish setup.
Confirm that the phone approved the same Wavo account. Keep both devices online. Wavo Web automatically retries its secure polling after temporary network errors and continues when the browser tab becomes visible again.
Open Linked devices and refresh the list. Only active linked-computer sessions appear. The list is loaded from server-side sessions, so it survives hard refreshes and browser restarts.
Sign out or revoke one of the existing linked computers from your primary phone. Wavo does not silently replace an existing device when the account is already at the limit.
Open the device card on the phone. A temporary pause ends automatically, while a permanent lock stays in place until you choose Unlock device.
Keep your phone nearby. The QR method is the fastest option, and the username code is always available as a fallback.