Skip to content

Keep your account secure

Anyone who logs in as you can change what’s on your screens. This page covers the three things that keep your account safe: a strong password, two-factor authentication, and signing out when you’ve finished.

Your password must be at least 14 characters long and include an upper case letter, a lower case letter and a number. A short phrase you can remember, with a number in it, works well.

  1. Click your initials in the top right corner, then the pencil icon next to your name.

    The user menu with the pencil icon next to the name outlined

  2. In Edit User Profile, type your Current Password. Type the new one in New Password and again in Retype New Password.

    The Current Password, New Password and Retype New Password boxes

  3. Click Save. Use the new password next time you log in.

If you share a login with your team, think about asking us for a login each instead. Email hello@casty.co.uk (see Add people to your account).

With two-factor authentication on, logging in needs your password and a six-digit code from an app on your phone. Someone who learns your password still can’t get in without your phone.

Install an authenticator app on your phone, such as Google Authenticator or another app that scans QR codes to set up a login.

  1. Click your initials in the top right corner, then the pencil icon next to your name.

  2. Click the Two Factor Authentication box and choose Google Authenticator. This works with any authenticator app.

    The Two Factor Authentication list open, with Google Authenticator outlined

    Don’t choose Email. The Casty CMS doesn’t send email, so the codes would never arrive.

  3. A QR code appears under Please scan the following image with your app. Open your authenticator app, add a new account and scan the code. The app starts showing a six-digit code that changes every 30 seconds.

    The QR code (blurred here), the Access Code box and the Generate and Show buttons for recovery codes

  4. Type the code your app shows into Access Code.

  5. Click Generate to create recovery codes. Copy them somewhere safe away from your phone, such as a password manager. Each one lets you log in once if you lose your phone.

  6. Scroll back to the top and type your Current Password. Click Save.

From now on, after your username and password, the login page asks for a code. Open your app, type the code it shows and click Verify.

The login page asking for the two-factor code, with a Verify button and a Use Recovery Code instead? link

On a computer that other people use, such as a laptop behind the bar, sign out every time you finish.

  1. Click your initials in the top right corner.

  2. Click Sign Out.

    The user menu with Sign Out outlined

There’s no reset link on the login page. Email hello@casty.co.uk from the address we have for you and we’ll set a new password. Change it to one of your own as soon as you log in.