Sign-in and security

Passwords, passkeys, two-step sign-in with an authenticator app, a text message or email, recovery codes, requiring two-step sign-in for everyone, and staying signed in.

Getting started

Everything about how you sign in is on one page.

Open the account menu at the bottom of the sidebar and press Settings. This opens Account and security.
Under Two-factor authentication, set up at least one second step: an authenticator app, a text message or email.
Save the recovery codes Mifumo shows you somewhere safe.
Add a passkey under Passkeys so you can sign in with your fingerprint, face or device PIN.

A red dot on Settings in the account menu means two-step sign-in is not set up yet.

How to

Change your password

Open Account and security.
Under Password, type your Current password.
Type the New password and Repeat new password. It needs at least 10 characters, with letters and numbers.
Press Change password.

Reset a forgotten password

On the sign-in page, press Forgot password?
Enter the email you sign in with and press Send reset link.
Open the email, follow the link and set a new password.

If the email does not come, ask an admin to reset your password from Users.

Open Account and security and find Authenticator app under Two-factor authentication.
Press Set up an authenticator app.
Open Google Authenticator, Microsoft Authenticator, 1Password or Passwords on iPhone and tap +.
Scan the QR code, or type the key shown under it.
Type the 6-digit code the app shows in Code from the app and press Turn on.
Save the recovery codes that appear. They are shown only once.

An authenticator app works without phone signal.

Open Account and security.
For a text message, enter your Mobile number under Text message and press Text me a code. Type the code in Code from the text and press Turn on.
For email, press Email me a code under Email. Type the code in Code from the email and press Turn on.

Codes expire in 10 minutes. Press Send a new code if one does not arrive. The Text message choice only shows when text message codes are switched on for your site.

Sign in with your password, Google or Apple as usual.
On the next screen, type the 6-digit code from your app, text message or email, and press Continue.
To get a code another way, press Text me a code instead or Email me a code instead.

Lost your phone? Type one of your recovery codes instead. Each one works once.

Make new recovery codes

Open Account and security.
Under Two-factor authentication, type your Current password.
Press Create new recovery codes. Your old codes stop working.

Save the new codes in a password manager, or print them and lock them away.

Add a passkey

Open Account and security and find Passkeys.
Press Add a passkey and give it a name, such as iPhone or Work laptop.
Confirm with your fingerprint, face, device PIN or security key.

To sign in with it, press Use a passkey instead on the sign-in page. A passkey that checks your fingerprint, face or PIN counts as both steps, so you are not asked for a code. You can Rename or Remove a passkey at any time. Passkeys are not available in the desktop app; on a Mac you can use Touch ID there instead.

Open Account and security and find Google and Apple sign-in.
Press Connect Google or Connect Apple and sign in to that account.

A Google account with the same email as your Mifumo login connects by itself the first time you use it. Press Disconnect to remove it. If two-step sign-in is on, you are still asked for a code after Google or Apple.

Make sure two-step sign-in is on for your own login first.
Open Settings, then Users.
Tick Require two-factor authentication for everyone and press Save.

Only the account owner sees this choice. Anyone without two-step sign-in is sent to their Account and security page to set it up when they next sign in. The Sign-in column on Users shows who has 2FA on.

Help someone who lost their phone

Open Settings, then Users.
Press Change next to the person.
Tick Reset two-factor (lost phone), or Reset password if they forgot it, and press Save.

They can then sign in and set up two-step sign-in again. To stop someone signing in at all, untick Can log in.

Stay signed in, and log out

On the sign-in page, tick Keep me logged in on a computer only you use.
To sign out, open the account menu at the bottom of the sidebar and press Log out.

While a page is open, Mifumo keeps you signed in so a long bill or journal is not lost mid-entry. A browser left idle is signed out after about 8 hours.

Settings

Your own settings are on Account and security:

Profile: your photo and Title, shown in the account menu.
Two-factor authentication: Authenticator app, Text message and Email, with recovery codes. You can have more than one. Turn off two-factor is hidden when your administrator requires it.
Passkeys: sign in with your fingerprint, face, device PIN or a security key.
Google and Apple sign-in: connect or disconnect each account.
Password: change your password.

For the whole account, on Settings, then Users:

Require two-factor authentication for everyone: the account owner's switch.
Change on each person: role, Can log in, Reset password and Reset two-factor (lost phone).

Questions

Mifumo can require two-step sign-in on every account. You see a banner with the days left. Set it up from Account and security before then; after the date you can only reach that page until you do. Codes can come from an app or by email.

Can I remove my only second step?

Yes, unless your administrator requires two-step sign-in. Removing your last method, or pressing Turn off two-factor, turns two-step sign-in off. Each change asks for your current password.

I lost my phone and my recovery codes. How do I get back in?

Ask your account owner or an admin to tick Reset two-factor (lost phone) for you on Users. Then sign in and set it up again.

Why do I get a code after signing in with Google?

Two-step sign-in protects your books even if someone gets into your Google or Apple account. Use a passkey if you want one step that counts as both.

Help guides

Getting started: Sign up, set up your company with its TIN and VRN, choose your modules, invite your team and get Mifumo on your phone.
Team, roles and permissions: Add users, give each one a role per company, build your own roles with the permission grid, work together with mentions, and import or export spreadsheets.
Approvals: Maker-checker on the documents you choose. People who can't approve submit, an approver posts or sends back with a reason, and nothing reaches the books before approval.
Sign-in and security: Passwords, passkeys, two-step sign-in with an authenticator app, a text message or email, recovery codes, requiring two-step sign-in for everyone, and staying signed in.
Group of companies: Run several companies under one login, give people a group role in every company, record intercompany entries once, and read consolidated reports with intercompany balances taken out.
Accounting: Your books in one place. Invoices, receipts, bills, expenses, banking, journals, VAT returns and financial statements, all posting to one double-entry ledger in TSh.
Inventory: Stock products, warehouses, adjustments, transfers and stock counts with a barcode scanner, landed cost on imports, purchase and sales orders, the point of sale till, and stock reports.
HR and payroll: Employees, monthly payroll with PAYE, NSSF, SDL, WCF and HESLB worked out for you, payslips, salary advances, per diem, leave, staff attendance by phone with GPS or QR, a shift roster, and final dues for leavers.
CRM: Leads, a drag-and-drop pipeline of deals, follow-ups, quotes from deals, a full customer timeline, SMS and email campaigns, and your own mailbox synced in.
Asset management: Keep a fixed asset register, charge depreciation, track who has each asset, and record disposals with the right journal entries.
Project management: Projects with their team, tasks, board and timeline, time logged on timesheets, milestone and time invoices, and the margin of every project.
FTTx projects: Track fibre roll-out purchase orders from your clients, the work you pass to subcontractors, and the money in and out on each PO.
Transport jobs: Record each cargo trip with its trucks, drivers and deliveries, attach the proof of delivery, see the margin on every delivery, and turn the job into an invoice.
Construction: Run each building contract with its bill of quantities, interim payment certificates, advances, retention, completion certificates and site costs.
Manufacturing: Write recipes for what you make, plan production runs, issue materials from stock and put finished goods into stock at what they really cost.
Pharmacy: Counter dispensing with patient and prescription details, medicines with TMDA numbers, first-expiry-first-out batches, expiry write-offs and the prescription register.
Motor vehicles: Sell imported vehicles from proforma to invoice, complete and approve the internal Sale Sheet, take instalment payments, and pay sales commissions.
Property management: Properties and units, tenants, leases and rent billed as invoices, arrears, repairs and statements for owners you manage for.
Law firm: Matters and case management (stages, parties, tasks, documents), time and costs, billing a matter in one step, the client (trust) account kept matter by matter, a court diary with reminders, the conflict check log and the advocate compliance register.
Livestock: A register of every animal or batch of birds, with health records, withdrawal periods, breeding and births, milk and eggs, and sales invoiced to the buyer.
Helpdesk: Customer problems and requests as numbered tickets, each with someone in charge, deadlines to answer and to solve, replies by email and internal notes.
Mining: Run each mine as a project, record the money it receives, see spending against those funds, and get a profit and loss for every mine and for the company.
Field Service: Jobs your technicians do at the customer's site, each with a time slot, a checklist, the parts used from stock, the hours worked, the customer's signature on the phone, and an invoice from the job.
Hospital: Patients, appointments and the queue from triage to the doctor, the lab, the pharmacy and the cashier. Wards with admissions, bed days and deposits, the theatre list and imaging. Bills split between the patient and their insurer, with claims and reports. The Pharmacy module is included.
Sign: Send a contract, lease or offer letter to be signed by link, on a phone or computer, and keep the signed copy with a record of who signed, when and from where.
Event ticketing: Set up an event with its ticket types, publish it after paying a one-off fee, and sell tickets from your own sale page. Buyers pay you by Lipa Namba or online, and get QR tickets by SMS and email. Ticket money goes straight to you, never to Mifumo.