Login Security

Users' email addresses may be verified when creating an account, recovering a password or performing sensitive security actions. The planned rule is a six-digit verification code valid for five minutes. Never share the code. A user who loses access to their email may ask support for a secure alternative procedure.

Passwords must contain at least 10 characters and must not match widely used weak passwords or the local part of the user's email address. Users must not share passwords, send them by email or disclose them to technical support. Re-entering a password when signing in or exporting data is an additional security step.

Users should be able to review their active devices/sessions and close sessions on other devices or all devices from the account's Security area. Other sessions are intended to be invalidated when passwords are changed or recovered. Renewed email-code verification is planned at the next login after 30 days without activity.

A suspicious login triggers planned email notification and a session-security review. If a security incident affects a user, notices are planned by email and in the account; any more urgent or additional statutory notice requirements prevail. Ordinary technical logs used in security investigations are intended to be retained for 90 days, subject to applicable legal exceptions.

Users may export existing personal data filtered by category and date. Before export starts, the account password must be checked again and repeated incorrect attempts rate-limited. The resulting ZIP is transmitted directly to the user's device over secure HTTPS. Archives must not remain permanently on the server and must not contain other users' information.

Muxtar TECH never requests your account password or one-time verification code by telephone, WhatsApp or email. Do not respond to such requests or open suspicious links. Report incidents immediately to info@muxtar.pro.az.

Users may challenge account-security restrictions and suspensions by email. Actions should be proportionate to the severity of the violation, and statutory rights remain preserved. Legal inquiries: info@muxtar.pro.az.

Current status: The account service is not connected to the site yet. E-mail alerts, 90-day log retention and the export of account data will be active once the account service is connected.

Related pages: Privacy Policy · Account Deletion · Cookie Policy · Terms of Use.