Sign in and out

Sign in

1. Go to app.outphish.com.
2. Enter your Email and Password, then click Sign in.
3. Check your email for a message called Your OutPhish Login Verification Code. It contains a six-digit code.
4. Type the code into Verification code and click Verify.

You land on Home. IT providers (MSPs) land on their client list.

The emailed code

Signing in needs your password and a code we email to you. This is called two-step verification. It stops someone who has learnt your password from getting into your account. It’s always on and can’t be switched off, but you can ask OutPhish to remember your own computer (see below).

• The code works for 30 minutes.
• Finish signing in within 30 minutes. If you take longer, you’ll see “Your verification session has expired. Please log in again.” Start again from the sign-in page.
• If you click Sign in twice in quick succession, you’ll still only get one code.
• If you get a code email you didn’t ask for, someone may know your password. Reset your password straight away.

If the code doesn’t arrive

1. Check your junk or spam folder.
2. On the Check your email page, click Resend verification code.
3. Use the code from the newest email. Earlier codes stop working once a new one is sent.

You can resend again after 60 seconds, up to three times in 15 minutes. After that you’ll see “You’ve asked for too many new codes. Use the code in your newest email, or wait 15 minutes and try again.”

If the code is rejected

You get five tries at each code. After that you’ll see “Too many incorrect attempts. Please request a new code.” Click Resend verification code to get a new one.

Skip the code on your own computer

Before you click Verify, tick Remember this device for 30 days. For the next 30 days, signing in on that browser won’t ask for a code. You still need your password.

Caution

Don’t tick Remember this device for 30 days on a shared or public computer.

How long you stay signed in

• A sign-in lasts up to 30 days from when you signed in, however much you use OutPhish in that time. After that you’ll see “For your security, please sign in again.”
• Closing your browser may also sign you out, depending on your browser’s settings.
• Resetting your password signs you out everywhere else.

Too many wrong passwords

Each wrong password shows how many attempts you have left. After five wrong passwords within 15 minutes, signing in to your account is locked for 15 minutes. You’ll see “Account temporarily locked due to too many failed login attempts. Please try again in 15 minutes.”

OutPhish also counts failed sign-ins from each internet connection, such as your office network. After five failed sign-ins from one connection within 15 minutes, signing in from that connection pauses for up to 15 minutes. You’ll see “You’ve made too many requests. Please try again later.” Wait 15 minutes and try again. Successful sign-ins don’t count, so colleagues signing in from the same office don’t use up each other’s attempts.

If you can’t remember your password, reset it instead of guessing.

Reset a forgotten password

1. On the sign-in page, click Forgot password?
2. Enter your Email and click Send reset link. You’ll see “If an account with that email exists, a password reset link has been sent.”
3. Open the email called Reset Your OutPhish Password and click Reset Password. The link works for 60 minutes. If you ask for more than one link, only the newest works.
4. On the Set a new password page, type your new password into New password and again into Confirm password. It needs at least 8 characters, one uppercase letter, one lowercase letter and one digit.
5. Click Save new password.
6. Sign in with your new password.

Resetting your password cancels every Remember this device for 30 days choice, so you’ll need an emailed code next time you sign in, on every device.

If the link has expired, you’ll see “This password reset link is invalid or has expired.” Start again from Forgot password?

Tip

There’s no separate “change password” screen. To change your password at any time, use Forgot password? on the sign-in page.

If an admin in your organisation resets your password for you, you’ll get the same kind of email. It says an administrator started the reset.

If your login was set up for you, the welcome email has a link to choose your password. That link works for 7 days. If it has expired, use Forgot password? to get a new one.

Sign out

1. Click your name at the bottom of the left-hand menu. On a phone or small screen, open the menu first with the menu button at the top left.
2. Click Log out.

You’ll see “Logged out successfully”.