Login Pages and Personalisation of Simulations
Realistic simulations need realistic details: a believable sign-in page, your company's look, the right names and topics. This article explains the settings that shape what your staff see – and what AutoPhish records when someone enters data.
Choose the login page
In the campaign wizard, the Login Page step decides what people see after clicking the link in a simulation:
Option | What people see |
|---|---|
Company login (default) | A sign-in page in your company's branding with username and password |
Prefer Google | Your company page with "Sign in with Google", followed by a simulated Google sign-in |
Prefer Microsoft | The same flow with a simulated Microsoft sign-in |
Additional options:
- Email-only login (skip password step) – for Company login: people only enter their e-mail address and then go straight to the microtraining, if microtraining is enabled. They are never asked for a password.
- Pre-fill target email on the SSO page – for the Google and Microsoft options.
- Preview Login Page – see the page before you launch. For Company login you can pick one of ten Page designs or leave it at Random (chosen per execution).
Your Google or Microsoft choice only applies when people land on your company's own page. Simulations that imitate an external organisation use that organisation's page instead. The Login Page step is skipped if you send people straight to training on click (see "Microtraining and Training after a Simulation").
Your branding
Logo and colours are set in your company details: Settings → Manage Companies → Edit. Upload a Company Logo (JPG, PNG, GIF or WEBP, max. 3 MB) and set your colours. Login pages, simulated messages and training pages use them.
Company context
When you set up your company, AutoPhish analyses your website and builds a Company Context – business model, products, key people and similar details. It is used to make simulations fit your organisation.
You find it in your company details. Admins can correct it with Edit Context or refresh it from your website with Rebuild Context; manual edits are kept.
For individual groups, add a List Context to a target list, for example "Accounting team, works with invoices" – see "Create and Manage Target Lists (incl. CSV Import)".
Topics AutoPhish should avoid
Some topics are off-limits for your organisation – for example a current restructuring. AutoPhish already avoids sensitive topics by default; you can add your own:
- Company-wide Forbidden Topics – in your company details. They apply to all campaigns.
- Campaign Forbidden Topics – in the Select a Scenario step of a campaign. Company-wide topics are inherited automatically.
Up to 10 topics per level, each up to 200 characters.
Language and names
- Choose the Language of the generated message in the wizard – English, German, Italian, Serbian, Spanish, Greek, French or Hungarian. It defaults to your own app language.
- Greetings use the names from your target list: tone 1–2 uses the full name ("Dear Jane Doe"), tone 3–5 the first name ("Hi Jane"). If a name is missing, a neutral greeting is used.
What is recorded on a login page
- Passwords are never transmitted or stored. The password field never leaves the browser.
- AutoPhish records that a login attempt happened, the e-mail address or username entered, the time and technical details such as browser and IP address. These are needed to tell real people from automated security scanners.
- With Anonymous Mode enabled, reports show tracking IDs instead of e-mail addresses, and entered usernames are not shown – see "How to enable Anonymous Mode".
Updated on: 28/10/2026
Thank you!