# Two-factor authentication in Mujib, email codes and backup codes

> Two-factor authentication in Mujib asks for a code sent to your email after your password, so a password alone opens nothing. Turn it on in Settings.

Two-factor authentication protects your Mujib account: after your password, Mujib asks for a 6-digit code sent to your email, so a password alone cannot open your account. The app calls it two-step verification. You turn it on under Security in Settings, and get backup codes for the day your email is out of reach.

Each account decides for itself: turning it on for yours does not force it on anyone else in the workspace.

## How do I turn on two-factor authentication?

You turn it on from the **Security** section of Settings, with a code sent to your email, so you know the address works before you rely on it.

1. Open **Settings**, then the **Security** section.
2. Next to **Two-step verification**, press **Turn on**.
3. Mujib emails you a code. Type it into **Verification code** and press **Confirm**.
4. Your backup codes appear once and only once. Press **Copy them** or **Download as a file**, and keep them somewhere safe outside your mailbox.
5. Tick **I saved them somewhere safe**, then press **Done**.

> **What happens the moment you turn it on**
>
> Your account is signed out of every other device, and the code is asked for when you sign in there again. Turn notifications back on on those devices after signing in, and reconnect ChatGPT or Claude if you had linked them to Mujib. An email confirms that two-step verification is on.
## What happens when I sign in after turning it on?

After your password you land on **Enter your code**, and the code reaches your email within seconds.

1. Open the email and copy the code. It works for 5 minutes, and only once.
2. Paste it into the page. Mujib checks it by itself once all the digits are in, or press **Verify and continue**.
3. If no code arrives, wait for the timer, press **Didn’t get it? Send a new code**, and look in your spam folder.

The code is asked for at every new sign-in, whichever way you sign in. If you do not finish the step, press **Sign out** to leave.

## What are backup codes and how do I use them?

Backup codes are 10 codes you get when you turn the feature on; each one signs you in once when you cannot reach your email.

- On the code page, press **Can’t reach your email? Use a backup code** and type one of your codes into **Backup code**.
- Each code works once, and an email reaches you whenever someone signs in with a backup code, so you know if it was not you.
- The **Backup codes** row shows how many you have left. When you are close to the end, a warning asks you to issue new ones.
- To issue new ones, press **New codes** and type the code sent to your email. The old codes stop working as soon as the new ones exist.

## How do I turn off two-factor authentication?

You turn it off from the same **Security** section, with your password and a code, so an open session alone cannot switch it off.

1. Press **Turn off** next to **Turn off two-step verification**.
2. Type your password, if your account has one.
3. Type the code sent to your email, or press **Can’t reach your email? Use a backup code** and type a backup code.
4. Press **Turn off** to confirm.

Once it is off, your password alone opens your account again, and an email confirms the change.

## What if I cannot finish signing in?

Most cases are solved with a new code; the table gives the fix for each message as it appears.

| What you see | What to do |
| --- | --- |
| **That code expired or was already used. Ask for a new one.** | Ask for a new code. A code works for 5 minutes, and once |
| **Too many tries on this code. Ask for a new one.** | Ask for a new code and type it carefully |
| **You asked for a lot of codes. Use the last one you got, or try when the timer ends.** | Use the last code you received, or wait for the timer to end |
| **Too many wrong tries, so we paused them for a while to protect your account.** | Wait for the time shown. If it is not you trying, press **Not you? Change your password** |
| You cannot reach your email | Sign in with one of your backup codes |
| You lost both your email and your codes | Contact the Mujib team; once they confirm it is you, they turn off two-step verification |

Repeated wrong codes on your account send you an email about it. Changing your password from the forgot-password page ends those attempts, because whoever is trying already knows your current password.

## Who can use two-factor authentication?

Every account that signs in with an email address can, which means the owner and admins. Team accounts that sign in with a username have no email to send a code to.

- Those accounts see that two-step verification is not available to them, and the workspace owner manages their passwords from the Team page.
- To protect team accounts, give them strong passwords and disable any account nobody uses. See [Team permissions](https://docs.mujib.ai/en/account/team-permissions/).

## Frequently asked questions

### Does the code come by text message or WhatsApp?

No. It only goes to the email address you sign in to Mujib with, and the page shows part of that address so you know where to look.

### Will Mujib ask for a code every time I open the dashboard?

No, only at each new sign-in. While you stay signed in on a device, no code is asked for.

### Can my staff turn it on?

Not when they sign in with a username, because those accounts have no email to send a code to. They are protected by the workspace owner managing their passwords and being able to disable them at once.

### Will the Mujib team ever ask me for my code?

No. The code is for you alone, and the Mujib team never asks for it, by call or by message.

### I lost my email and my backup codes. What now?

Contact the Mujib team. Once they confirm it is you, they turn off two-step verification, you sign in with your password and turn it on again.

---

Source: https://docs.mujib.ai/en/account/two-factor/ · Last updated: 2026-11-04