diff --git a/encoder/firmware.php b/encoder/firmware.php
index 0337731..99399b4 100755
--- a/encoder/firmware.php
+++ b/encoder/firmware.php
@@ -210,10 +210,11 @@ EwIDAQAB
         case 'reset':
             $files = glob('/var/www/encoder/*.json');
             foreach ($files as $file) {
-                if (is_file($file) && basename($file) !== 'critical.json') {
+                if (is_file($file)) {
                     unlink($file);
                 }
             }
+            
             break;
         case 'reboot':
             exec('sudo reboot');
diff --git a/encoder/forgot.php b/encoder/forgot.php
new file mode 100644
index 0000000..bed285a
--- /dev/null
+++ b/encoder/forgot.php
@@ -0,0 +1,408 @@
+<?php
+declare(strict_types=1);
+
+session_start();
+
+$ALLOWED_IP = '172.16.111.112';
+$clientIp  = $_SERVER['REMOTE_ADDR'] ?? '';
+
+$usersFile = '/var/www/users.json';
+
+/* ---------- helpers ---------- */
+function load_json(string $file): array {
+    return is_file($file) ? json_decode(file_get_contents($file), true) ?: [] : [];
+}
+function save_json(string $file, array $data): void {
+    file_put_contents($file, json_encode($data, JSON_PRETTY_PRINT), LOCK_EX);
+}
+
+/* ---------- CSRF ---------- */
+if (empty($_SESSION['csrf'])) {
+    $_SESSION['csrf'] = bin2hex(random_bytes(32));
+}
+
+$error = '';
+$success = '';
+
+/* ---------- HANDLE RESET ---------- */
+if ($clientIp === $ALLOWED_IP && $_SERVER['REQUEST_METHOD'] === 'POST') {
+
+    if (!hash_equals($_SESSION['csrf'], $_POST['csrf'] ?? '')) {
+        http_response_code(400);
+        die('Invalid request');
+    }
+
+    $username = strtolower(trim($_POST['username'] ?? ''));
+    $password = $_POST['password'] ?? '';
+    $confirm  = $_POST['confirm'] ?? '';
+
+    if (!preg_match('/^[a-z0-9_]{3,32}$/', $username)) {
+        $error = 'Invalid username format.';
+    } elseif (strlen($password) < 8) {
+        $error = 'Password must be at least 8 characters.';
+    } elseif ($password !== $confirm) {
+        $error = 'Passwords do not match.';
+    }
+
+    if (!$error) {
+        $users = load_json($usersFile);
+        $users[$username] = [
+            'password' => password_hash($password, PASSWORD_DEFAULT)
+        ];
+        save_json($usersFile, $users);
+        $success = 'Username and password reset successfully.';
+    }
+}
+?>
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1.0" />
+<title>URMIC powred by Shreebhattji</title>
+
+    <style>
+        * {
+            box-sizing: border-box;
+            margin: 0;
+            padding: 0;
+        }
+
+        :root {
+            --bg-1: #0f172a;
+            --bg-2: #1d4ed8;
+            --bg-3: #22c55e;
+            --accent: #f97316;
+            --text-main: #f9fafb;
+            --text-muted: #cbd5f5;
+        }
+
+        html,
+        body {
+            height: 100%;
+        }
+
+        body {
+            font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI",
+                sans-serif;
+            color: var(--text-main);
+            background:
+                radial-gradient(circle at top left, #22c55e33, transparent 60%),
+                radial-gradient(circle at bottom right, #f9731633, transparent 65%),
+                linear-gradient(135deg, var(--bg-1), var(--bg-2));
+            overflow: hidden;
+        }
+
+        .page-wrap {
+            position: relative;
+            min-height: 100vh;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            padding: 1.5rem;
+            isolation: isolate;
+        }
+
+        .rain-container {
+            position: fixed;
+            inset: 0;
+            overflow: hidden;
+            pointer-events: none;
+            z-index: 0;
+        }
+
+        .raindrop {
+            position: absolute;
+            width: 2px;
+            height: 70px;
+            background: linear-gradient(
+                to bottom,
+                rgba(255, 255, 255, 0.9),
+                rgba(255, 255, 255, 0)
+            );
+            opacity: 0.55;
+            border-radius: 999px;
+            filter: blur(0.3px);
+            animation-name: fall;
+            animation-timing-function: linear;
+            animation-iteration-count: infinite;
+            will-change: transform;
+        }
+
+        @keyframes fall {
+            0% {
+                transform: translate3d(0, -120px, 0);
+            }
+            100% {
+                transform: translate3d(0, 110vh, 0);
+            }
+        }
+
+        .card {
+            position: relative;
+            z-index: 1;
+            max-width: 720px;
+            width: 100%;
+            padding: 2.5rem 2rem;
+            border-radius: 1.75rem;
+            border: 1px solid rgba(148, 163, 184, 0.6);
+            background: linear-gradient(
+                    135deg,
+                    rgba(15, 23, 42, 0.9),
+                    rgba(15, 23, 42, 0.7)
+                )
+                border-box;
+            backdrop-filter: blur(16px);
+            box-shadow:
+                0 20px 60px rgba(15, 23, 42, 0.7),
+                0 0 0 1px rgba(15, 23, 42, 0.9);
+            display: flex;
+            flex-direction: column;
+            gap: 1.25rem;
+        }
+
+        .badge {
+            display: inline-flex;
+            align-items: center;
+            gap: 0.35rem;
+            padding: 0.25rem 0.7rem;
+            border-radius: 999px;
+            font-size: 0.7rem;
+            text-transform: uppercase;
+            letter-spacing: 0.12em;
+            color: var(--text-main);
+            background: linear-gradient(
+                90deg,
+                rgba(59, 130, 246, 0.6),
+                rgba(34, 197, 94, 0.75)
+            );
+        }
+
+        .badge-dot {
+            width: 0.35rem;
+            height: 0.35rem;
+            border-radius: 999px;
+            background: #bbf7d0;
+        }
+
+        h1 {
+            font-size: clamp(2.1rem, 4vw, 2.8rem);
+            line-height: 1.08;
+        }
+
+        h1 span.highlight {
+            font-size: clamp(1.1rem, 2vw, 1.8rem);
+            background-image: linear-gradient(
+                120deg,
+                #22c55e,
+                #a855f7,
+                #f97316
+            );
+            background-clip: text;
+            -webkit-background-clip: text;
+            color: transparent;
+            white-space: nowrap;
+        }
+
+        p.subtitle {
+            font-size: 0.95rem;
+            color: var(--text-muted);
+            max-width: 40rem;
+        }
+
+        .tagline {
+            margin-top: 0.5rem;
+            font-size: 0.9rem;
+            color: #e5e7eb;
+        }
+
+        .pill-row {
+            display: flex;
+            flex-wrap: wrap;
+            gap: 0.65rem;
+            margin-top: 0.75rem;
+        }
+
+        .pill {
+            padding: 0.35rem 0.8rem;
+            border-radius: 999px;
+            border: 1px solid rgba(148, 163, 184, 0.8);
+            font-size: 0.75rem;
+            color: #e5e7eb;
+            background: radial-gradient(
+                circle at top left,
+                rgba(59, 130, 246, 0.22),
+                rgba(15, 23, 42, 0.7)
+            );
+        }
+
+        .footer {
+            margin-top: 1.5rem;
+            display: flex;
+            flex-wrap: wrap;
+            gap: 0.75rem;
+            align-items: center;
+            justify-content: space-between;
+            font-size: 0.8rem;
+            color: var(--text-muted);
+        }
+
+        .brand {
+            font-weight: 600;
+            letter-spacing: 0.08em;
+            text-transform: uppercase;
+        }
+
+        .brand span {
+            color: var(--accent);
+        }
+
+        .links {
+            display: flex;
+            flex-wrap: wrap;
+            gap: 0.75rem;
+        }
+
+        .link {
+            text-decoration: none;
+            font-size: 0.8rem;
+            color: var(--text-muted);
+            border-bottom: 1px dashed rgba(148, 163, 184, 0.7);
+        }
+
+        .link:hover {
+            color: #ffffff;
+            border-bottom-style: solid;
+        }
+
+        @media (min-width: 640px) {
+            .card {
+                padding: 3rem;
+            }
+        }
+
+        @media (max-width: 480px) {
+            .footer {
+                align-items: flex-start;
+                gap: 0.4rem;
+            }
+        }
+    </style>
+</head>
+
+<body>
+<div class="rain-container" id="rain"></div>
+
+<div class="page-wrap">
+<main class="card">
+
+<div class="badge">
+    <span class="badge-dot"></span>
+    <span>Password Recovery</span>
+</div>
+
+<h1>
+    Universal Encoder / Decoder
+    <span class="highlight">powred by Shreebhattji</span>
+</h1>
+
+<?php if ($clientIp !== $ALLOWED_IP): ?>
+
+<p class="subtitle">
+    Set you computer ip to <strong>172.16.111.112</strong> then
+    Connect USB dongle to encoder and visit
+    <strong>172.16.111.111</strong> for password reset
+    
+</p>
+
+<?php else: ?>
+
+<?php if ($error): ?>
+<p style="color:#fca5a5"><?= htmlspecialchars($error) ?></p>
+<?php endif; ?>
+
+<?php if ($success): ?>
+<p style="color:#86efac"><?= htmlspecialchars($success) ?></p>
+<?php endif; ?>
+
+<form method="post" autocomplete="off" style="display:flex;flex-direction:column;gap:0.75rem">
+
+<input type="hidden" name="csrf" value="<?= htmlspecialchars($_SESSION['csrf']) ?>">
+
+<input
+    type="text"
+    name="username"
+    placeholder="New Username"
+    required
+    style="padding:0.7rem;border-radius:0.5rem;border:none"
+/>
+
+<input
+    type="password"
+    name="password"
+    placeholder="New Password"
+    required
+    style="padding:0.7rem;border-radius:0.5rem;border:none"
+/>
+
+<input
+    type="password"
+    name="confirm"
+    placeholder="Confirm Password"
+    required
+    style="padding:0.7rem;border-radius:0.5rem;border:none"
+/>
+
+<button
+    type="submit"
+    style="padding:0.75rem;border-radius:0.6rem;border:none;
+           background:#22c55e;color:#000;font-weight:600">
+    Reset Credentials
+</button>
+
+</form>
+
+<?php endif; ?>
+
+</main>
+</div>
+
+<!-- ===== YOUR RAIN SCRIPT (UNCHANGED) ===== -->
+<script>
+(function () {
+    const container = document.getElementById("rain");
+
+    function generateRain() {
+        if (!container) return;
+        container.innerHTML = "";
+
+        const width = window.innerWidth;
+        const height = window.innerHeight;
+        let drops = Math.floor(width * 0.16);
+
+        if (window.innerWidth < 600) drops = Math.floor(width * 0.10);
+        else if (window.innerWidth > 1400) drops = Math.floor(width * 0.18);
+
+        for (let i = 0; i < drops; i++) {
+            const drop = document.createElement("span");
+            drop.className = "raindrop";
+            drop.style.left = Math.random() * 100 + "vw";
+            drop.style.top = -120 - Math.random() * height * 0.3 + "px";
+            drop.style.animationDuration = (0.7 + Math.random() * 1.2) + "s";
+            drop.style.animationDelay = (Math.random() * -3) + "s";
+            drop.style.opacity = (0.35 + Math.random() * 0.55).toFixed(2);
+            container.appendChild(drop);
+        }
+    }
+
+    let resizeTimer;
+    window.addEventListener("resize", () => {
+        clearTimeout(resizeTimer);
+        resizeTimer = setTimeout(generateRain, 180);
+    });
+
+    window.addEventListener("DOMContentLoaded", generateRain);
+})();
+</script>
+</body>
+</html>
