Logins, two-step sign-in and the activity log
Each person's own login and security, and how to see who changed what in your studio.
Everyone has their own login
Each team member signs in with their own email and password, set up from their invitation. Never share your login. Separate logins mean you can remove one person without changing anyone else's password, and the activity log shows who did what.
Owners and Admins find their security settings under Settings > Security. Everyone else finds them under Your account.
Two-step sign-in
With two-step sign-in, signing in also asks for a code from an app on your phone, so a leaked password alone can't get anyone in. Each person turns it on for their own account:
- Open Security (or Your account) and find Two-step sign-in.
- Type your password and click Set up two-step sign-in.
- Scan the code with an authenticator app like Google Authenticator, 1Password or Authy.
- Save the backup codes somewhere safe. Each works once if you lose your phone, and they won't be shown again.
- Type the 6-digit code your app shows and click Turn on two-step sign-in.
To turn it off, type your password and a code from your app (or a backup code), and click Turn off two-step sign-in.
Sign out everywhere
Sign out everywhere ends every session for your account, on this device and any other. Click it, then click again to confirm. Use it if you lose a phone or signed in somewhere you shouldn't have. Other team members stay signed in. To sign someone else out, remove them from the team.
The activity log
Owners and Admins can see it at the bottom of Settings > Security. It lists changes made in the admin, newest first: sign-ins, payments, price changes, deletions and settings. For each one you see:
- When it happened.
- Who did it. "Former team member" means someone since removed. Flashslash support means our team, while helping you.
- What was done, and Details.
- From: the device it came from, like "Safari on iPhone" or "Chrome on Windows". Point at it to see the internet address.
Passwords are never recorded.
Above it, Flashslash support visits lists every time someone from Flashslash signed in to help you, with the reason they gave.