Your account
Your account is yours alone. It holds your name and language, your password, an optional code from your phone when you sign in, the phones and browsers signed in as you, the PIN for the clock-in screen and the alerts you want. Everyone has one, whatever their job: open Settings (on a phone, tap More, then Settings). What head office does for other people’s accounts is in People & roles.
Find what you need
- Signing in — signing in and your first password, forgetting your password and the questions people ask when they can’t get in.
- Your details — your name, your language, your clock-in PIN and your alert choices.
- Keeping it safe — changing your password, two-step verification, trusted devices, where you are signed in and signing out.
Signing in
Open the sign-in page. Type your Email or username and your Password, then press Sign in. The eye button next to the password (Show password) shows what you typed. If you sign in with a username, capital letters in it don’t matter; in the password they do.
Mihwar keeps you signed in for 7 days. Then you sign in again, and Sign out ends it sooner. If you turned on two-step verification, the page asks for one more thing after your password: see two-step verification.
Your first sign-in with a temporary password
If a manager or head office gave you a temporary password, your first sign-in opens Choose your password before anything else. Type the temporary password, then your own password twice, and press Save and continue. Yours must be at least 8 characters and different from the temporary one. Nothing else opens until you have done it, and Sign out on that page lets you leave without choosing. You get a temporary password again whenever head office resets yours. A person whose invitation arrived by e-mail chooses a password from the link in it instead; that link works once, for 7 days.
When the sign-in page says no
- “The email or username and password don't match. Check both and try again.” Check both, and remember the password cares about capital letters. If you are sure, press Forgot password?.
- “Too many tries, so this account is paused for 15 minutes. Try again then, or ask your manager to reset your password.” 10 wrong passwords or codes within 15 minutes pause the account, on any device. Wait, or ask head office to reset your password: a reset lifts the pause at once.
- “Too many sign-in attempts from this device. Wait a minute and try again.” Sign-in allows 5 tries a minute from one network connection. At a busy branch, a few people signing in together on the same Wi-Fi can reach it. Wait a minute.
- “This account is turned off. Ask your manager.” Head office turned the account off, and head office can turn it back on.
Your name and details
Open Settings. The page is called My Profile. Under Edit Profile, type your name in Full Name (at least 2 characters) and press Save Changes. The line “Profile updated successfully” appears and the new name shows at the top of the page.
Your e-mail address is shown greyed out with “Email cannot be changed”. If you sign in with a username, it is shown the same way with “You sign in with this username. Your manager can change it.” If either is wrong, ask head office to correct it (People & roles). Your picture is your initials; there is no photo to upload.
Under Settings hub at the top there is a card for each part: Profile, Security & 2FA and Clock-in PIN are for everyone, and head office sees a few more. The Clock-in PIN card opens the Security page: your PIN is there, with two-step verification and, while that is on, your trusted devices.
Your language
Mihwar works in Arabic and in English. Switch whenever you like; nothing you did is lost.
- In Settings, Language & region shows EN and AR. Press the one you want.
- Press your name at the bottom of the side menu (on a phone: More, then your name) and choose your language under Language. Drivers find the same menu under their name at the top of their screen.
- On the sign-in pages, EN and AR are at the top.
The page reloads in the new language, and Arabic reads right to left. Your choice is saved on your account, so it follows you to every phone and computer. It also sets the language of the alerts and e-mails Mihwar sends you; if you never chose one, they use your company’s language. A few alerts can still arrive in English.
Your language does not change the digits (always 0–9), the calendar (Gregorian, Hijri or both) or the time zone. Those belong to your company, and head office sets them in Organization & branches.
Changing your password
- Open Settings and find Change Password.
- Type your Current Password, then your New Password (at least 8 characters) and Confirm New Password.
- Press Change Password. The line “Password changed successfully” appears and the three boxes empty.
If you forget your password
- On the sign-in page press Forgot password?.
- Type your e-mail address and press Send reset link.
- The page says Check your email. It says this for every address, so nobody can find out who has an account. If your address has one, a message called “Reset your Mihwar password” arrives, in your language.
- Open the link in the message. It works once, for 1 hour. Type the new password twice and press Update password, then Go to login.
A reset signs you out everywhere. Every phone and browser signed in as you is signed out, and every trusted device is forgotten, so the next sign-in asks for the code again. It also lifts a pause after too many wrong tries. You can ask for 5 links an hour from one network connection.
If you have a username, or no message comes
A username has no mailbox, so there is nothing to send to. The page says so: “Sign in with a username? Your manager can give you a new password.” The button is head office’s: they press Reset password for you on the Users page, so ask them, through your manager if that is easier. You get a temporary password and choose your own at your next sign-in.
The same goes when your e-mail never arrives. Look in the spam folder first, and check that you typed the address on your account. This page can’t tell you whether a message was sent, because it gives the same answer every time; and if your workspace can’t send e-mail at all, nothing arrives. Asking head office for a temporary password is the way in.
Two-step verification
Two-step verification adds one more thing after your password: a 6-digit code from an app on your phone. A stolen or guessed password is then not enough to get in. It is optional, unless head office requires it.
Turning it on
- Open Security (or the Two-step verification card on Settings) and press Set up authenticator.
- On your phone, open an authenticator app, such as Google Authenticator or 1Password, and scan the QR code. If the app is on the same phone and you can’t scan, copy the line of letters and numbers under the picture and paste it into the app instead.
- Keep the Backup recovery codes: 10 codes like ABCD-EFGH, and each works once. Press Download recovery codes to save them as a small file, and keep that file somewhere other than this phone.
- Type the code the app shows now in Confirm with a 6-digit code and press Enable two-step verification. The line “Two-step verification is on.” appears and the card says Two-step verification is enabled.
Nothing changes at sign-in until step 4. Cancel stops it. If you start again you get a new picture and new codes, and the earlier ones no longer work.
Signing in with it
After your password the page adds Authenticator code. Type the 6 digits the app shows now. Each code works once: if you have just used one, wait for the app to show the next (every 30 seconds). A wrong code counts as a wrong try towards the 15-minute pause.
When your phone is not with you
Type one recovery code in Recovery code (optional) and leave Authenticator code empty. Each recovery code works once and is then gone. Using one does not make the device trusted.
A recovery code only gets you in. To use a new phone, ask head office to reset your two-step verification, sign in with your password, and set it up again from step 1.
New recovery codes
When few are left, or you lost the file, type a fresh code from the app in Authenticator code to regenerate backup codes and press Regenerate recovery codes. 10 new codes appear under New backup recovery codes, and the old ones stop working.
Turning it off
Type a fresh code from the app in Code from app to turn off 2FA and press Turn off two-step verification. The line “Two-step verification is off.” appears, and your trusted devices are forgotten. You need the app for this; without it, ask head office to reset it.
Trusted devices
When the sign-in page asks for your code, it also shows a tick: Trust this device for 30 days. Tick it on your own phone and Mihwar stops asking for the code there for 30 days. It still asks for your password every time.
- It works only when you typed a code from the app. A recovery code never makes a device trusted.
- The 30 days count from the day you ticked it; using the device does not extend them.
- The trust belongs to the browser, not to the phone. Another browser, a private window, or a browser whose data was cleared asks for the code again.
To see or remove them, open Security. The Trusted devices card is there while two-step verification is on; it is not on Settings. Each browser shows its name, with This device on the one you are using, when it was last used and when it expires. Remove takes one away. Forget all devices takes them all away, and the next sign-in on each asks for the code.
Mihwar also forgets all your trusted devices by itself when you turn two-step verification off, when your password is reset (by e-mail or by head office), and when head office resets your two-step verification, signs you out of all devices or turns your account off. Changing your own password, signing out and Sign out all other sessions do not.
Where you are signed in
Two lists on Settings show where your account has been used.
- Active sessions lists each phone or browser signed in as you. The one in your hand says This device with the badge Current. The others say Other session, with the browser, the system, the network address and when it was last active. Revoke signs one of them out at once, and Sign out all other sessions signs out every one except this.
- Login history lists your last sign-ins, up to 10: the day and time (in your company’s calendar and time zone), the address and the device.
If a sign-in is not yours, change your password, then press Sign out all other sessions.
Your clock-in PIN
Your PIN is four digits. You type it on the branch’s clock-in screen to clock in and out, and when a checklist step is given to you by name. It shows you are there, without signing in again. It is separate from your password and from two-step verification: the clock-in screen never asks for an authenticator code. How clocking in works is in Scheduling, and the checklist step in Checklists.
- Open Security. The Clock-in PIN card at the top of Settings opens it.
- Under PIN for the clock-in screen and checklist steps, type four digits in New PIN (4 digits) and the same four in Confirm PIN.
- Press Save PIN. The line “PIN saved” appears. The button stays grey until both boxes hold the same four digits.
A small “· set” next to the title means you already have one. You don’t need the old PIN to change it. Mihwar keeps only a scrambled copy of the PIN you set, so nobody can read it back; if you forget it, set a new one. A manager can also set a PIN for you, and you are told when they do.
5 wrong tries within 15 minutes lock your PIN for 15 minutes, on every screen that asks for it. Setting a new PIN lifts the lock at once.
Your alert choices
Under Notification preferences on Settings, a table has a row for each kind of alert and a column for each way it can reach you: In-app (the bell), Email and, where your phone can receive them, Phone. Tick or untick a box and it saves at once: “Your notification choices are saved.” Mute turns a whole row off, and Unmute puts its usual ways back.
Alerts about work that is yours (due, late or escalated to you) always reach your bell, even when the row is muted. Alerts and e-mails are written in your language; see your language. What each alert says and who gets it is in Alerts.
Signing out
Press your name at the bottom of the side menu, then Sign out. On a phone, tap More first. Drivers press their name at the top of their screen. Signing out ends this phone or browser only: your other sign-ins stay (see where you are signed in), and a trusted device stays trusted.
Always sign out on a phone or computer that is not yours. A sign-in lasts 7 days, so closing the page is not enough.
Questions
I forgot my password.
Press Forgot password? on the sign-in page and follow if you forget your password. If you sign in with a username, ask head office for a new password, through your manager if that is easier.
I never got the reset e-mail.
Look in the spam folder, and check that you typed the address on your account. The link lasts 1 hour and works once. If nothing comes, ask head office to press Reset password for you: you get a temporary password instead.
The code is always wrong.
The usual cause is the phone’s clock. A code only works near the time it was made, so if the clock is a minute or more out, every code is refused: turn on automatic date and time in the phone’s settings. Other causes: you just used that code (wait for the next one), or you typed the code of an older entry in the app (if you set up twice, only the newest Mihwar entry works). Each wrong code counts towards the 15-minute pause, so stop after a few tries.
I lost my phone.
To get in now, use a recovery code (see two-step verification). To use a new phone, ask head office to press Reset 2FA for you on the Users page (People & roles); you sign in with your password and set it up again on the new phone. With no recovery codes either, ask head office the same way. If you are the owner, an admin can’t reset yours: another owner can, or contact Mihwar.
My language keeps switching back.
The language saved on your account wins over the one you pick on the sign-in page. Sign in, then press your language in Language & region. If it still goes back, the change did not reach Mihwar, usually because of a weak connection. Press it again when the signal is better.
It asks for a code every time.
The device is not trusted. You did not tick Trust this device for 30 days, you signed in with a recovery code, you are using another browser or a private window, the browser’s data was cleared, 30 days have passed, or your password was reset or two-step verification was turned off and on. See trusted devices.
I changed my password, but another phone is still signed in.
Changing your password does not sign other devices out. Press Sign out all other sessions in where you are signed in.
Why does Mihwar keep sending me to Security?
Head office requires two-step verification, and you have not set it up yet. Follow turning it on. Until then, nothing else saves.
My PIN doesn’t work.
Check that you have one: the title of the PIN card ends with “· set” when you do. 5 wrong tries lock it for 15 minutes. Set a new PIN to lift the lock at once, or wait. A PIN is four digits and is not your password.
Can I sign in with Google or Microsoft?
Not today. The sign-in page asks for your e-mail address or username and your password.
Some messages on Settings are in English when I use Arabic.
A few still are: the red lines under the name and password boxes, the message for a wrong current password or code, two buttons in the two-step card (Download recovery codes and Turn off two-step verification) and the small role label under your name. Your language setting is saved; it is those screens that have not caught up.
Mihwar asks me to verify my e-mail.
Owners and head office may see Please verify your email on the Overview. Press Resend email and open the link in the message within 24 hours. It is never required: Mihwar works without it. If the answer is that e-mail is not set up for this workspace, nothing was sent, and you can ignore the banner.
Can I change my e-mail address or username?
Not yourself. Ask head office, who can correct it on the Users page (People & roles). When an e-mail address is changed, Mihwar asks you to verify the new one.