Account security

Everyone looks after their own account on the Account security screen. Owners and managers also see a staff section (see Keep staff accounts safe).

Open Account security

1. Press Account in the navigation.
2. In the Security box, press Manage security.

Two-step verification

The Two-step verification box shows whether it is On or Off.

• Off: press Turn on two-step verification and follow the set-up steps. It takes about 2 minutes.
• On: nothing to do. Each time you sign in, you also enter 6 digits from the authenticator app.

The Owner, Manager and Assistant editor must always use it. Staff are encouraged to; it is required when the owner has turned on the rule for all staff.

There is no button yet to turn two-step verification off yourself or to make new backup codes. To start again (for example with a new phone), see Lost phone.

Backup codes

When you turn on two-step verification you get 10 backup codes. Each works once to sign in without your phone.

• Keep them somewhere safe, away from your phone: on paper, or in a password manager.
• Never send them to anyone, COREBIZS staff included. COREBIZS never asks for your codes.
• The screen does not show them again after set-up.

Change password

1. In the Change password box, enter the Current password.
2. Enter a New password (at least 10 characters, different from the current one).
3. Type it again in Repeat the new password.
4. Press Change password.

After the change, other devices are signed out and must sign in with the new password. The device you are using stays signed in.

A password that is too easy to guess (too common, contains your email, a repeated pattern) is refused; the screen says so under the box.

Where you are signed in

The Where you are signed in box lists the phones and computers signed in to your account: browser, kind of device, last use. The one you are using is labelled This device.

• See a device you do not know: press Sign out on its line, then change your password.
• To sign out everything but this device: press Sign out all other devices and confirm.

To sign out on the device you are using: go to Account and press Sign out.

Forgot your password

1. On the Sign in screen, press Forgot password? (or Forgot your current password? in the change-password box).
2. Enter the email you sign in with and press Send link.
3. Open the email Reset your COREBIZS password and press Set a new password. The link works for 1 hour and only once.
4. Enter the New password, type it again, and press Save new password.
5. Sign in with the new password. Every other device has been signed out.

Good to know:

• The screen always says the link was sent, whether or not the email has an account. No email: check Spam and wait a few minutes. Each address gets at most one email of the same kind every 15 minutes.
• If you have not confirmed your sign-up email yet, you get the sign-up confirmation email again instead of a reset link. Confirm first, then start again from step 1.
• Link expired: the page says This link does not work. Press Ask for a new link.
• Cannot open your mailbox: message COREBIZS on Zalo OA. COREBIZS checks that it really is you, then gives you a password link through a checked channel (a phone call, in person).

Lost phone

You still have backup codes

1. Sign in with your email and password.
2. On Enter your verification code, press Lost your phone? Use a backup code.
3. Enter one backup code and press Confirm.
4. Go to Account security and press Sign out on the lost phone's line.

You lost the backup codes too

• Staff, assistant editors, managers: tell the owner. The owner contacts COREBIZS to confirm it is really you.
• Owner: contact COREBIZS; COREBIZS checks against the contract details.

Once you are verified, COREBIZS turns off your two-step verification and signs you out everywhere. At your next sign-in you set it up again with the new phone (roles that require it go straight to the set-up screen).

Meanwhile, the owner or a manager can sign the lost phone out of your account (next section).

Keep staff accounts safe

Who can do this: the Owner and Manager. A manager only acts on people with a lower role; the owner acts on everyone except other owners.

The Your staff box shows whether each person Uses two-step verification or has No two-step verification, on how many devices they are signed in, and when they last used it.

• Send a reminder: sends the email Turn on two-step verification for your COREBIZS account to that person. Each person gets at most one reminder a day.
• Sign out everywhere: use it when someone lost their phone or left. They must sign in again with their password on every device. Press the button, then confirm.

Someone who left: signing out is not enough. Remove their access on the Staff screen (see Remove access).

Require two-step verification for all staff

Only the Owner can change this setting. Managers only see the current state.

1. Turn on the switch Require two-step verification for all staff.
2. From their next use, staff without it must set it up before they can continue.

With the switch off, staff are encouraged, not required. Managers, assistant editors and owners must always use it.