PhishFortress

Account Setup

Learn how to set up and configure your PhishFortress account

Overview

Setting up your PhishFortress account is the first step to implementing a comprehensive security awareness program. This guide will walk you through account creation, email verification, domain setup, and initial security configuration.

Account Creation

Start by creating your PhishFortress account with your business email address.

Step-by-Step Sign Up

  1. Visit the Sign-Up Page: Navigate to the PhishFortress registration page
  2. Enter Business Email: Use your corporate email address (personal emails are not accepted)
  3. Create Secure Password: Choose a strong password with at least 12 characters
  4. Organization Details: Provide your company name, size, and industry
  5. Accept Terms: Review and accept the Terms of Service and Privacy Policy
  6. Complete Registration: Click "Create Account" to finish the process

Email Verification

After creating your account, you'll need to verify your email address to activate your account.

Verification Process
  1. Check your email inbox for a verification message from PhishFortress
  2. Click the "Verify Email Address" button in the email
  3. You'll be redirected to a confirmation page
  4. Your account is now verified and ready to use

Domain Verification

Domain verification proves you own the email domain and enables phishing simulation capabilities.

DNS Record Method (Recommended)

Add a TXT record to your domain's DNS settings to verify ownership.

  1. Navigate to Settings → Domain Verification in your PhishFortress dashboard
  2. Copy the provided TXT record value
  3. Log into your DNS provider (GoDaddy, Cloudflare, etc.)
  4. Add a new TXT record with the provided value
  5. Wait for DNS propagation (up to 24 hours)
  6. Click "Verify Domain" in PhishFortress

Example TXT Record:

Name: _phishfortress-verification
Value: phishfortress-verification=abc123def456

Security Configuration

Configure essential security settings to protect your PhishFortress account and data.

Two-Factor Authentication (2FA)
Add an extra layer of security to your account

We strongly recommend enabling 2FA for all administrator accounts.

  1. Go to Account Settings → Security
  2. Click "Enable Two-Factor Authentication"
  3. Scan the QR code with your authenticator app
  4. Enter the verification code to confirm setup
  5. Save your backup codes in a secure location
Security Settings Guide
IP Allowlisting
Restrict access to your account by IP address

Configure IP allowlisting to limit account access to specific IP addresses or ranges.

  • Navigate to Organization Settings → Security
  • Enable "IP Address Restrictions"
  • Add your office IP addresses or ranges
  • Test access before saving changes

Initial Configuration

Complete these initial configuration steps to prepare your account:

Organization Profile
  • Company name and logo
  • Industry and company size
  • Primary contact information
  • Time zone and locale settings
Notification Settings
  • Email notification preferences
  • Campaign alert settings
  • Report delivery schedule
  • Security alert configuration
User Roles
  • Define administrator roles
  • Set permission levels
  • Configure approval workflows
  • Assign department managers
Branding
  • Upload company logo
  • Set brand colors
  • Customize email templates
  • Configure landing pages

Setup Verification Checklist

Use this checklist to ensure your account is properly configured:

Account created with business email
Email address verified
Domain ownership verified
Two-factor authentication enabled
Organization profile completed
Security settings configured
Dashboard Overview