> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.autophish.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Login Pages and Personalisation of Simulations

Realistic simulations need realistic details: a believable sign-in page, your company's look, the right names and topics. This article explains the settings that shape what your staff see – and what AutoPhish records when someone enters data.

## Choose the login page

In the campaign wizard, the **Login Page** step decides what people see after clicking the link in a simulation:

![Login Page step with Company login, Prefer Google and Prefer Microsoft](https://storage.crisp.chat/users/helpdesk/website/-/4/3/7/4/437439cedb096800/login-page-step_ssjrzo.jpg)


| Option | What people see |
| ---- | ---- |
| **Company login** (default) | A sign-in page in your company's branding with username and password |
| **Prefer Google** | Your company page with "Sign in with Google", followed by a simulated Google sign-in |
| **Prefer Microsoft** | The same flow with a simulated Microsoft sign-in |

Additional options:

- **Email-only login (skip password step)** – for Company login: people only enter their e-mail address and then go straight to the microtraining, if microtraining is enabled. They are never asked for a password.
- **Pre-fill target email on the SSO page** – for the Google and Microsoft options.
- **Preview Login Page** – see the page before you launch. For Company login you can pick one of ten **Page designs** or leave it at **Random (chosen per execution)**.

Your Google or Microsoft choice only applies when people land on your company's own page. Simulations that imitate an external organisation use that organisation's page instead. The Login Page step is skipped if you send people straight to training on click (see "Microtraining and Training after a Simulation").

## Your branding

Logo and colours are set in your company details: **Settings → Manage Companies → Edit**. Upload a **Company Logo** (JPG, PNG, GIF or WEBP, max. 3 MB) and set your colours. Login pages, simulated messages and training pages use them.

## Company context

When you set up your company, AutoPhish analyses your website and builds a **Company Context** – business model, products, key people and similar details. It is used to make simulations fit your organisation.

You find it in your company details. Admins can correct it with **Edit Context** or refresh it from your website with **Rebuild Context**; manual edits are kept.

For individual groups, add a **List Context** to a target list, for example "Accounting team, works with invoices" – see "Create and Manage Target Lists (incl. CSV Import)".

## Topics AutoPhish should avoid

Some topics are off-limits for your organisation – for example a current restructuring. AutoPhish already avoids sensitive topics by default; you can add your own:

- **Company-wide Forbidden Topics** – in your company details. They apply to all campaigns.
- **Campaign Forbidden Topics** – in the **Select a Scenario** step of a campaign. Company-wide topics are inherited automatically.

Up to 10 topics per level, each up to 200 characters.

## Language and names

- Choose the **Language** of the generated message in the wizard – English, German, Italian, Serbian, Spanish, Greek, French or Hungarian. It defaults to your own app language.
- Greetings use the names from your target list: tone 1–2 uses the full name ("Dear Jane Doe"), tone 3–5 the first name ("Hi Jane"). If a name is missing, a neutral greeting is used.

## What is recorded on a login page

- **Passwords are never transmitted or stored.** The password field never leaves the browser.
- AutoPhish records that a login attempt happened, the e-mail address or username entered, the time and technical details such as browser and IP address. These are needed to tell real people from automated security scanners.
- With **Anonymous Mode** enabled, reports show tracking IDs instead of e-mail addresses, and entered usernames are not shown – see "How to enable Anonymous Mode".