First login & 2FA

How to sign in with your business username, what "Remember me" does, how two-factor authentication works when it is turned on, and how to reset a forgotten password.

The sign-in page is at /app/login. Your welcome email contains a link that pre-fills your business username: /app/login?business=yourusername.

Signing in#

Business username

The handle chosen at sign-up (for example shahtextiles). Every member of the business uses the same username here; it identifies the workspace, not the person.
Email

Your own login email — the owner's sign-up email, or the email an admin used when inviting you.
Password

Your password. Use the eye icon to show it while typing.
Security code

Type the characters shown in the image. A fresh code is issued after any failed attempt.
Sign in

If two-factor authentication applies to you, a second step appears (below). Otherwise you land on the Dashboard.

Remember me on this device (ticked by default) stores your business username and email in this browser so they are pre-filled next time. It does not store your password. Untick it on a shared computer.

Staying signed in#

The app keeps a secure session cookie and refreshes your access automatically while you use it. After a hard refresh or reopening the browser the app restores your session from that cookie; if it cannot, you are taken back to the login page. Signing out ends the session on that device.

Two-factor authentication (2FA)#

2FA is off by default. The owner can turn it on in Settings → Security — Two-factor authentication, choosing whether it covers the owner only or every member. See Security & two-factor auth.

When 2FA applies to your account:

First time — after your password is accepted, the page shows a QR code. Scan it with Google Authenticator (or any TOTP app such as Authy or Microsoft Authenticator), then enter the six-digit code the app shows. Your device is now enrolled.
Later sign-ins — a browser that has passed 2FA is trusted for 30 days. On a new browser or device, or after 30 days, enter the current six-digit code from the authenticator app after your password.

The code step must be completed within 5 minutes and allows 5 attempts. After that you see Your sign-in expired — enter your password again and start over from the password step.

Forgot your password?#

Click Forgot password? under the password field.
Enter your business username and email, then click Email me a reset code. The page confirms: If the account exists, a 6-digit reset code has been emailed (valid 10 minutes).
Open the email from Kapda Stock and copy the six-digit code.
Enter the code and a new password (12+ characters with an uppercase letter, a number and a special character), then click Verify code.
You see Password reset! Sign in with your new password. and are returned to the sign-in form.

The code expires after 10 minutes, works once, and is cancelled after 5 wrong attempts (Too many attempts — request a new code).

Error messages#

Message	What to do
Invalid credentials	Check the business username, email and password. Passwords are case-sensitive.
Captcha verification failed. Please try again.	Type the new security code shown.
Invalid TOTP code	Enter the current code — they change every 30 seconds. Check the phone's clock is set automatically.
Your sign-in expired — enter your password again	The 2FA step took too long or had too many wrong codes. Start from the password.
Reset code is invalid or has expired	Request a new code.
This account is no longer active. Please contact support.	Your member account was removed. Ask the owner.
Your account setup is incomplete. Please contact support.	Something went wrong during provisioning — contact support.
Too many requests. Please try again later.	More than 5 failed sign-in, 2FA or reset attempts in 15 minutes from your connection (successful sign-ins do not count). Wait up to 15 minutes.