Where to go
Settings > Profile
Open your user menu in the top bar, then choose Profile.
Who can change it
You manage your own profile
Admins can reset another user’s MFA from Organization Users, but they do not set your personal password or recovery codes.
Update Your Profile
The profile header shows your name, email, current role, avatar, and membership context. Use Edit Profile when you need to update your display name or phone number.
- Open the user menu in the top bar.
- Select Profile.
- Choose Edit Profile.
- Update your display name, phone number, or avatar.
- Save the change, then confirm your header reflects the new information.
Email is managed by sign-in
Your email address is tied to the sign-in account. If an email address is wrong, ask an
owner or admin to review the user record and invite status instead of editing the display
name around it.
Use PIN Lock on Shared Workstations
PIN Lock is for quick unlock on shared warehouse or fulfillment devices. It is not a replacement for your password or MFA.- Open Profile and find the Security section.
- Choose Enable PIN or Change PIN.
- Enter a 4 to 6 digit PIN and confirm it.
- Use Lock Screen from the user menu when stepping away from a shared device.
Set Up MFA
MFA adds a second sign-in check after your password. Arcus supports multiple factor types. Keep at least one reliable factor available and save your recovery codes when prompted.Authenticator app
Use an app that generates one-time codes. Save your recovery codes after setup so you can get back in if the device is lost.
Security key
Use a hardware security key for strong sign-in protection. You can add more than one key so a backup is available.
Email-code MFA
Use email codes as a backup option when appropriate. If you also have a stronger factor, review whether email-code should stay enabled.
Recovery codes
Store the recovery codes outside Arcus after enrolling your first MFA factor. They are for emergency account recovery.
Authenticator App Details
The authenticator setup flow shows a QR code, a manual-entry secret, an optional device name, and a 6-digit verification code field. After successful enrollment, Arcus shows recovery codes once. Confirm that you saved them before leaving the flow. Removing an authenticator requires a typed confirmation phrase. Removal also invalidates the recovery codes for that factor, so add another factor first if this is your only way to sign in.Security Key Details
Security keys include hardware keys and device passkeys such as Touch ID or Windows Hello. When adding one, choose the authenticator type, name the key, and wait for the browser prompt before tapping the key or sensor. You can rename enrolled keys so they are easy to identify later. Arcus may block removal when the key is your only MFA factor; enroll another factor before removing the last one.Email-Code MFA Details
Email-code MFA sends a 6-digit enrollment code to your email before it is enabled. The code expires after 10 minutes. At sign-in, an authenticator app takes precedence when both authenticator and email-code MFA are enabled. Email-code MFA is useful as a backup, but it is weaker than an authenticator app or a security key because a compromised mailbox can expose the code. Review whether it should remain enabled after you add a stronger factor.Required MFA Enrollment
If your account has no MFA factor, Arcus can send you to the MFA setup page before you continue. Choose at least one factor. If you enroll an authenticator app or security key, save and acknowledge the recovery codes before returning to normal work.If You Lose Access
Use your recovery codes first if you still have them. If you cannot sign in with any enrolled factor, contact an owner or admin. They can reset MFA from Organization Users.- The admin opens Admin > Organization > Users.
- They find your user row and choose Reset MFA.
- They enter the required confirmation phrase and a reason for the audit log.
- You sign in again and enroll a new MFA factor before continuing.
Review Entity Memberships
Your profile also lists the entities you can access, your role in each entity, and which entity is currently active. If the wrong entity opens by default or a module is missing, ask an owner or admin to check Organization Users and your role.Common Profile and Security Blocks
- Profile changes do not save: confirm required fields are complete, phone format is valid, and the browser session is still active.
- Email address is wrong: ask an owner or admin to review the invited user record instead of changing the display name around the email.
- PIN unlock fails: use your normal password and MFA, then reset the PIN from Profile after sign-in.
- MFA code is rejected: check device time, use a recovery code if available, or ask an owner or admin to reset MFA from Organization Users.
- Security key does not register: confirm the browser supports security keys, the key is present, and the prompt was not blocked by the browser.
- Wrong entity or role appears: ask an owner or admin to review entity membership, role assignment, default entity, and location restrictions.
Related Articles
User Management
Invite users, manage entity access, roles, permissions, location restrictions, PINs, and MFA reset workflows.
Settings Overview
Understand the admin surfaces, settings groups, and workflow impact areas.
Navigation Overview
Find modules, records, settings, and support tools quickly.

