Team and security
One account, your whole team
Invite the people who text your customers, give each the right level of access, and protect every login with a second step. Free on every account, however many people you add.
How do team logins work in CaptiFi Connect?
Every person gets their own login to the shared account. An owner or admin invites them by email and picks a role: owner for everything including billing and the team, admin for everything except ownership, member for sending, the inbox, contacts and campaigns. Each person can turn on two-step sign-in with an authenticator app, and every change is recorded against the person who made it.
Roles
Three roles cover how most businesses work:
- Owner: everything, including buying credit, billing details, inviting and removing people, and changing roles. An account always has at least one owner.
- Admin: everything an owner can do except change who owns the account. Admins manage API keys, webhooks, sender names, numbers and settings.
- Member: sends texts, answers the inbox, manages contacts, lists, templates and campaigns. Members cannot see billing or touch API keys, webhooks or the team.
Inviting people
Under Team, enter an email address and a role and we send an invitation that lasts seven days. The person sets their own password and lands in the dashboard. Nobody shares a password, and when someone leaves you remove them and their sessions end at once.
Every text records who sent it, and the audit trail records who changed what, so when a customer asks why they were texted you can see which colleague did it and when.
Two-step sign-in
Anyone can add a second step to their login under Settings: scan a code with an authenticator app such as Google Authenticator, Microsoft Authenticator or 1Password, type the six-digit code it shows, and from then on a password alone is not enough. You get eight recovery codes to keep somewhere safe for the day the phone is lost.
Settings also shows how many devices are signed in and lets you sign out everywhere else with one click. Changing your password does the same.
What else protects the account
Passwords are hashed, API keys are shown once and stored as a hash, webhook secrets are encrypted at rest, and the whole dashboard and API run over HTTPS. Changing your login email needs your password and is announced to the old address. The security page lists the rest.
Questions people ask
How many people can I add?
As many as you need. Team logins are free on every account.
Can a member buy credit?
No. Buying credit, billing details and auto top-up are for owners and admins. Members see the balance so they know how much is left.
Is two-step sign-in compulsory?
It is optional for now, and we recommend it for every owner and admin. We will let owners require it for everyone on the account.
What if I lose my phone?
Use one of the eight recovery codes you were given when you set it up. Each works once. If you have lost those too, another owner on the account can remove and re-invite you, or email support and we will verify you another way.
Can I use the same login for two companies?
Not yet. A login belongs to one account. Use a different email address for each company.
Send your first text this week
Set up your account and contacts now; we check every new account before it can send.