Two-factor means Mucka asks for a 6-digit code as well as your password every time you sign in. Someone who gets hold of your password still can't get in without your phone.
You can get the code on WhatsApp (nothing to install) or from an authenticator app like Google Authenticator. You can have both.
Turn it on with WhatsApp
- Go to Settings → You → Security.
- Switch on Two-step sign-in (on a computer, press Turn on two-factor).
- Check the number. If you've already linked WhatsApp to Mucka, that number is filled in for you. Change it if you use WhatsApp on a different one.
- Press Send code. A message from Mucka arrives on WhatsApp with a 6-digit code.
- Type the code and press Verify and turn on.
That's it. Next time you sign in, Mucka sends a fresh code to WhatsApp straight after your password.
Getting the code in quickly
- iPhone (iOS 26 or later): the code pops up above the keyboard. Tap it and it fills itself in. WhatsApp notifications need to be on, and so does Settings → Passwords → Password Options → Autofill Security Codes on the iPhone.
- Android, in the Mucka app: tap Autofill on the WhatsApp message and Mucka fills the code in for you.
- Anywhere else: tap Copy code on the WhatsApp message, go back to Mucka and paste it.
No message? Wait a few seconds, then press Send another code.
Use an authenticator app instead (or as well)
In the set-up, press Rather use an authenticator app?. Mucka shows a QR code: scan it with Google Authenticator, Authy, 1Password or any similar app, then type the 6-digit code the app shows.
If you have both, Mucka sends the WhatsApp code first, and you can press Use your authenticator app instead on the code screen. An authenticator app works with no signal, so it's a handy backup.
Turn it off
Go back to Settings → You → Security while you're signed in and switch Two-step sign-in off (on a computer, press Remove beside each method). You can only do this from a session where you've already entered a code.
Common gotchas
- "We couldn't send a WhatsApp message to that number." Check it's the number WhatsApp is on, with the right digits.
- "That code isn't right." Use the newest message. Asking for another code replaces the one before.
- "That code has run out." Codes last five minutes. Press Send another code.
- Changed your number or lost your phone. There are no backup codes. Email support@mucka.ai from the address you sign in with. We'll check it's really you, then switch two-factor off so you can sign in and set it up again.
- It's per person. Each of your team turns it on for their own login. An owner can't switch it on for everyone.