Account Security

SunMule protects every staff and customer account with a password and multi-factor authentication.

Signing in

1. Enter your email and password on the sign-in page.
2. If your email belongs to more than one company, choose the company.
3. If you work at more than one salon, choose the salon you are working at.
4. Enter your verification code (see below).

You land on the page that fits your role. See User roles.

Resetting your password

Select Forgot password on the sign-in page, enter your email and follow the link in the email you receive. New accounts get a similar email to create their first password.

Multi-factor authentication

Multi-factor authentication (MFA) is required. The first time you sign in, SunMule asks you to set it up before you can open any other page. After that, you are asked for a verification code when you sign in on a new session.

SunMule supports two methods:

• Authenticator app: Scan the QR code with an authenticator app (such as Google Authenticator) and enter the 6-digit code to confirm.
• Email code: SunMule emails a 6-digit code that is valid for 10 minutes.

Recovery codes

When you finish setting up MFA, SunMule shows you a set of single-use recovery codes. Store them somewhere safe. They are shown only once, and each can be used once if you lose access to your authenticator or email. SunMule warns you when you use your last one.

Tips

• Use a unique password that you do not use anywhere else.
• Sign out of shared computers.
• Disable staff accounts as soon as someone leaves. See Employee management.