Two routes here: changing your password while you're already logged in, or resetting it when you've forgotten the old one.
Change it while logged in
Head to Settings → Security. You'll see a Password section with three fields:
- Current password
- New password (minimum 8 characters)
- Confirm new password
Fill them in, tap Save. Mucka updates the password immediately. You stay logged in on this device, but any other browser or device you're signed in on gets logged out for safety.
This is the same flow for everyone, owner, admin or engineer.
Reset a forgotten password
If you can't get into Mucka because you don't remember the password, head to the login page and tap Forgot password?. Enter your email and Mucka sends a reset link.
A few things to know:
- Link expires after a short window. Use it within 15 minutes or request a new one.
- Check spam. Reset emails sometimes land there first time.
- Outlook SafeLinks. If you're on Outlook and clicking the link sends you to a "link expired" page, ask for a fresh one and open it in a different browser. (We patched the worst of this, but corporate Outlook sometimes still mangles links.)
Turn on two-factor authentication
Same Security tab has a Two-factor authentication section. Tap Enable and Mucka shows a QR code. Scan it with Google Authenticator, Authy, 1Password or any TOTP app, then enter the 6-digit code to confirm.
From then on, every new login on a fresh device asks for a 6-digit code from your app, on top of your password.
Strongly recommended for owners and admins. Your Mucka account holds client data, invoices and payment history. Treat it like online banking.
Common gotchas
- "Current password is wrong" but you're sure it's right. Try a hard refresh, sign out and sign back in. If it persists, use the forgotten-password flow to reset.
- Lost your 2FA device. You'll need recovery codes (shown when you set up 2FA, save them somewhere safe). If you didn't save them, contact support.
- Engineer can't see Security tab. All roles see Settings, but the visible tabs depend on permissions. Security is always available, including to engineers. If it's hidden, raise a support ticket.