Sign-in security

This page explains how ASTRO protects your company's sign-ins, so you can answer your members' questions and act when someone leaves or loses a phone.

Password and authenticator code

  • Everyone signs in with their e-mail address, a password and a six-digit code from an authenticator app. The code is always required; no company can switch it off.
  • The first sign-in sets up the authenticator app. After that each sign-in asks for the current code.
  • ASTRO signs a person out after 30 minutes without activity, after asking a minute before.

Remember this device for 7 days

On the code step, a person can tick Remember this device for 7 days. That browser then asks only for the e-mail address and password for 7 days; after that, the code is asked for again. It is unticked by default and should only be used on a device that person alone uses. A new browser, a private window or cleared browser data always asks for the code.

Sign out, Sign out everywhere, Forget this device

All three are in the account menu (your name at the top right):

  • Sign out ends the session in this browser. Other browsers stay signed in, and a remembered device stays remembered.
  • Sign out everywhere signs the person out of every browser and device, and forgets this browser, so the next sign-in here asks for the code.
  • Forget this device (shown only on a remembered browser) keeps the person signed in, but the next sign-in here asks for the code.

If someone thinks their password or a device is no longer safe, ask them to use Sign out everywhere, then choose a new password with Forgot password? on the sign-in page.

A person who forgot their password resets it themselves the same way: ASTRO e-mails a code, and they choose a new password.

When someone leaves

  1. Open Users and select Remove on their row. They lose access to your company on their next request; their records and history stay.
  2. If they belong to other companies in ASTRO, they keep those until each company removes them.
  3. Reassign their open deals and follow-ups to a colleague.

Lost authenticator

Administrators cannot reset a member's authenticator from inside ASTRO. If someone has lost the phone with their authenticator app, contact ASTRO support to reset it. Until then, removing the member on Users keeps your company's data safe.

What a company switch does

People who work for more than one company switch between them in the account menu. Each company keeps its own customers, settings, role and permissions: the role a person has here says nothing about the role they hold elsewhere, and removing them here never affects their other companies. Switching asks first if there are unsaved changes, then opens the chosen company's dashboard. Nothing from one company is ever shown in another.

Related