Keep your account secure

Your account holds your customers' details and controls your money, so it is worth a few minutes to lock it down. This article covers your password, signing out, and giving your team the right access.

Before you start

• Owners and admins can change the team. Everyone can look after their own password.

Steps

Use a strong password, or Google

1. Use a password you use nowhere else. The app asks for at least 6 characters; longer is safer. A password manager makes this easy.
2. Or sign in with Continue with Google, and protect your Google account with its own two-step sign-in.
3. To change your password, sign out, press Forgot your password? on the sign-in page and follow Reset a forgotten password. There is no separate change-password screen.

Sign out on shared computers

1. Press Sign out at the bottom of the sidebar.
2. You return to the sign-in page. Signing out also forgets which account you were working in on that browser, so the next person does not land in it.

Give everyone their own login

1. Never share your login. Invite each person from Settings › Team with Invite teammate. See Invite your team.
2. Choose the lowest role that lets them do their job: Member to work in the business, Admin only for people who manage settings and billing.
3. When someone leaves, press Remove beside their name. Their access ends at once; their notes and tasks stay.

Look after invitation links

• An invitation link works once and lasts 7 days. Only a scrambled copy is stored, so a link cannot be shown again after you close the window.
• Pressing Copy link beside a pending invitation makes a new link; the old one stops working.
• Press Cancel beside an invitation you no longer need.

What happens next

Money stays with owners and admins: only they can change the plan, open the billing portal, top up the wallet, buy add-ons, invite or remove people, and manage the sending domain and email alerts. A member who tries is told "Only an owner or admin can change billing. Ask one of them."

For agencies

You and your staff can open any client account from the account menu or Sub-accounts. While you are inside a client you are not a member of, a bar says "You are working in (client) as their agency", and each visit is logged. Press Back to my account when you are done, so you do not work in the wrong client by mistake.

For clients of an agency

Your agency can open your account to help you, and each visit is logged. Your own team is still yours to manage under Settings › Team.

Troubleshooting

Someone who left still has access. Open Settings › Team and press Remove beside them. If there is no Remove button, they are an owner (owners cannot be removed here) or you are not an owner or admin.

I can't remove myself. You cannot remove your own access, and the last owner cannot be removed. Ask another owner or admin.

An invitation went to the wrong address. Press Cancel beside it and send a new one to the right address. The link only works for the invited address anyway.

I think someone else knows my password. Reset it now with Forgot your password?. The old password stops working as soon as you set a new one.

I got a password reset email I didn't ask for. Ignore it. Nothing changes unless someone opens the link from your inbox and sets a new password.

Related

• Team roles and what each can do
• Reset a forgotten password
• Export your contacts and erase someone's personal data