Skip to main content

Forgot/Reset Password

Overview​

Self-service password recovery for a Tactical ID / IdentityHub account (auth.mchmr.ai) when you're locked out and can't log in — as opposed to Updating Password, which covers changing your password while already signed in.

Prerequisites​

  • Access to the email address or username on file for the account.
  • Access to the inbox that receives mail from MCHMR Alerts <noreply@mchmr.ai>.

Steps​

  1. Go to https://auth.mchmr.ai.
  2. On the login screen, click "Forgot username or password?".

Tactical ID login screen — click &quot;Forgot username or password?&quot; to start this flow

  1. Enter your email address or username (e.g. john.tester.civ) in the Email or Username field, then click Continue.
  2. The screen updates to "Check your Inbox for a verification email." It typically arrives within a minute or two — if it doesn't, use "Send Email again" rather than restarting the whole flow.
  3. Open the email from MCHMR Alerts <noreply@mchmr.ai>, subject referencing Tactical ID: "Hi [username], you recently requested to change your password for your IdentityHub account." The link is valid for 30 minutes from when it's sent.
  4. Click Reset Password in the email. This opens a unique recovery link (auth.mchmr.ai/if/flow/default-recovery-flow/?next=%2F&flow_token=...).
  5. Confirm the account shown is yours and click Continue. If it's not your account, click "Not you?" instead.
  6. Enter a new password in Password and Password (repeat), then click Continue.
  7. You're redirected to the My applications page, now logged in with the new password. Your browser may offer to save it to a password manager.

Troubleshooting​

  • Reset link expired: links expire 30 minutes after the email is sent — restart from step 2.
  • No email arrives: check spam/junk, confirm the address on file is correct, then use Send Email again before trying a fresh request.
  • "Not you?" shown: means the link matched a different account than expected — don't continue; verify you used the correct username/email in step 3.
  • Weak password rejected: add length and an uncommon word rather than just substituting symbols into a short one.
  • "Passwords don't match": the Password and Password (repeat) fields differ — retype both carefully; the form won't submit until they're identical.