Two-factor authentication in Mujib, email codes and backup codes
Two-factor authentication protects your Mujib account: after your password, Mujib asks for a 6-digit code sent to your email, so a password alone cannot open your account. The app calls it two-step verification. You turn it on under Security in Settings, and get backup codes for the day your email is out of reach.
Each account decides for itself: turning it on for yours does not force it on anyone else in the workspace.
How do I turn on two-factor authentication?
Section titled “How do I turn on two-factor authentication?”You turn it on from the Security section of Settings, with a code sent to your email, so you know the address works before you rely on it.
- Open Settings, then the Security section.
- Next to Two-step verification, press Turn on.
- Mujib emails you a code. Type it into Verification code and press Confirm.
- Your backup codes appear once and only once. Press Copy them or Download as a file, and keep them somewhere safe outside your mailbox.
- Tick I saved them somewhere safe, then press Done.
What happens when I sign in after turning it on?
Section titled “What happens when I sign in after turning it on?”After your password you land on Enter your code, and the code reaches your email within seconds.
- Open the email and copy the code. It works for 5 minutes, and only once.
- Paste it into the page. Mujib checks it by itself once all the digits are in, or press Verify and continue.
- If no code arrives, wait for the timer, press Didn’t get it? Send a new code, and look in your spam folder.
The code is asked for at every new sign-in, whichever way you sign in. If you do not finish the step, press Sign out to leave.
What are backup codes and how do I use them?
Section titled “What are backup codes and how do I use them?”Backup codes are 10 codes you get when you turn the feature on; each one signs you in once when you cannot reach your email.
- On the code page, press Can’t reach your email? Use a backup code and type one of your codes into Backup code.
- Each code works once, and an email reaches you whenever someone signs in with a backup code, so you know if it was not you.
- The Backup codes row shows how many you have left. When you are close to the end, a warning asks you to issue new ones.
- To issue new ones, press New codes and type the code sent to your email. The old codes stop working as soon as the new ones exist.
How do I turn off two-factor authentication?
Section titled “How do I turn off two-factor authentication?”You turn it off from the same Security section, with your password and a code, so an open session alone cannot switch it off.
- Press Turn off next to Turn off two-step verification.
- Type your password, if your account has one.
- Type the code sent to your email, or press Can’t reach your email? Use a backup code and type a backup code.
- Press Turn off to confirm.
Once it is off, your password alone opens your account again, and an email confirms the change.
What if I cannot finish signing in?
Section titled “What if I cannot finish signing in?”Most cases are solved with a new code; the table gives the fix for each message as it appears.
| What you see | What to do |
|---|---|
| That code expired or was already used. Ask for a new one. | Ask for a new code. A code works for 5 minutes, and once |
| Too many tries on this code. Ask for a new one. | Ask for a new code and type it carefully |
| You asked for a lot of codes. Use the last one you got, or try when the timer ends. | Use the last code you received, or wait for the timer to end |
| Too many wrong tries, so we paused them for a while to protect your account. | Wait for the time shown. If it is not you trying, press Not you? Change your password |
| You cannot reach your email | Sign in with one of your backup codes |
| You lost both your email and your codes | Contact the Mujib team; once they confirm it is you, they turn off two-step verification |
Repeated wrong codes on your account send you an email about it. Changing your password from the forgot-password page ends those attempts, because whoever is trying already knows your current password.
Who can use two-factor authentication?
Section titled “Who can use two-factor authentication?”Every account that signs in with an email address can, which means the owner and admins. Team accounts that sign in with a username have no email to send a code to.
- Those accounts see that two-step verification is not available to them, and the workspace owner manages their passwords from the Team page.
- To protect team accounts, give them strong passwords and disable any account nobody uses. See Team permissions.
Frequently asked questions
Does the code come by text message or WhatsApp?
No. It only goes to the email address you sign in to Mujib with, and the page shows part of that address so you know where to look.
Will Mujib ask for a code every time I open the dashboard?
No, only at each new sign-in. While you stay signed in on a device, no code is asked for.
Can my staff turn it on?
Not when they sign in with a username, because those accounts have no email to send a code to. They are protected by the workspace owner managing their passwords and being able to disable them at once.
Will the Mujib team ever ask me for my code?
No. The code is for you alone, and the Mujib team never asks for it, by call or by message.
I lost my email and my backup codes. What now?
Contact the Mujib team. Once they confirm it is you, they turn off two-step verification, you sign in with your password and turn it on again.