Articles on: Account

Getting Started: How to set up AutoPhish for your Company

After you have created your AutoPhish account (see "How to create an AutoPhish Account"), the Dashboard guides you through a short Get started checklist. This article walks you through every step.


The Get started checklist


The checklist on the Dashboard shows your progress ("… of … steps complete"). Each step unlocks the next one:


  1. Set Up Your Company
  2. Verify Your Domain
  3. Select a Subscription Plan
  4. Create Your First Target List
  5. Create Your First Campaign
  6. Report a Phishing Email


After you have verified a domain, the checklist also offers Start security monitoring. This step is optional and does not block the others.


Step 1 – Set up your company


Click Go to Company Setup and fill in:


  • Company Name, Company Website and CEO Name – AutoPhish uses these to make simulations realistic.
  • Email Address for Domain Verification – an address on your company's own domain, for example admin@yourcompany.com.
  • Optionally your Company Address and Company Logo (JPG, PNG, GIF or WEBP, max. 3 MB) and your Primary, Accent and Background colours. Simulated messages and training pages use your logo and colours.
  • Anonymous Mode – enables pseudonymised reporting. Once enabled, you cannot switch it off yourself; see "How to enable Anonymous Mode".


Accept the legal documents on behalf of the company and click Complete Setup. AutoPhish now analyses your website to tailor future simulations – this takes up to about 30 seconds.


Step 2 – Verify your domain


AutoPhish only sends simulations to addresses on domains your company has verified.


  • Automatic: If the verification address uses the same domain as the e-mail address you registered with, the domain is verified automatically.
  • By e-mail: Otherwise AutoPhish sends a verification link to the address you entered. Open the e-mail and click the link within 24 hours. Check your spam folder if it doesn't arrive.
  • By DNS record: In the Security Center, open the domain and click Verify Domain. Choose DNS TXT record, click Generate DNS instructions, add the TXT record shown at your DNS provider and click Check DNS record. The instructions are valid for 7 days.


Addresses at public providers such as gmail.com, outlook.com, gmx.de or web.de cannot be verified – use an address on your own domain.


Step 3 – Select a subscription plan


Click View Pricing Plans and choose a plan, or start the free 7-day trial of the Professional plan. See "Billing, Invoices & Payment Methods".


Step 4 – Create your first target list


Click Go to Target Lists and add the people who should receive simulations – manually or by CSV import. Start with a small test list. See "Create and Manage Target Lists (incl. CSV Import)".


Step 5 – Create your first campaign


Click Create Campaign and follow the wizard. See "Create and Launch a Campaign".


Step 6 – Report a phishing e-mail


Show your staff how to report suspicious e-mails – see "How to report suspicious mails". The step is completed as soon as the first report arrives. Until then, the checklist stays visible on the Dashboard.


Troubleshooting


  • "Verification is not allowed for public domains": Use an address on your company's own domain.
  • Verification link expired: Request a new one or use the DNS TXT method.
  • No access to the verification inbox: Ask your IT administrator to verify via DNS, or contact AutoPhish support.

Updated on: 28/10/2026

Was this article helpful?

Share your feedback

Cancel

Thank you!