> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.autophish.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Microtraining and Training after a Simulation

People learn best right after they made a mistake. AutoPhish therefore shows a short learning unit (microtraining) directly after someone falls for a simulation and can automatically enrol them in a longer course on the AutoPhish Training Platform. This article explains what your staff see and how you configure it.

## What people see after falling for a simulation

By default, when someone enters data on the simulated login page, they land on the **microtraining page** instead:

1. **"This Was a Security Exercise"** – a clear, non-judgemental message that this was a simulation.
2. **"Let's Spot the Red Flags"** – a step-by-step walkthrough of 3–5 warning signs, highlighted in the exact message they received.
3. **"Why This Almost Worked"** – the psychological trick behind the message (urgency, authority, curiosity …).
4. A closing call to action to **report** suspicious messages in future.

The page uses your company logo and colours. If training on the platform is assigned, a button **Access Training Platform** is shown.

Variants:

- **Training on click:** If enabled, the click on the link itself opens the lesson "Why a click can be risky" – no login page is shown.
- **Printed QR posters:** People who scan a poster and enter data on the landing page get a short QR-specific lesson.

## Configure training per campaign

Training is set per campaign in the **Training** step of the campaign wizard (also available when you edit a campaign):

![Training settings of a campaign](https://storage.crisp.chat/users/helpdesk/website/-/4/3/7/4/437439cedb096800/campaign-training-settings_i73xls.png)

| Option | What it does |
| ---- | ---- |
| **Show microtraining page** | Shows the microtraining after a failure (on by default). If off, people only see "Invalid username or password." and no AutoPhish training follows. |
| **Assign AutoPhish Training Platform** | Automatically enrols people in a course after their first failure (on by default). |
| **Skip landing page – send to training on click** | Sends people to the microtraining as soon as they click, without a login page. Not available for printed QR codes. |
| **External training redirect URL** | Sends people to your own training instead. Cannot be combined with the AutoPhish Training Platform; completion of external training is not tracked in AutoPhish. |
| **Customize microtraining** | Change the headline, message and footer texts. |

Use **Preview microtraining** and **Preview AutoPhish Training** to see exactly what your staff will get, then save the campaign.

## Automatic enrolment in the AutoPhish Training Platform

When both microtraining and the platform are switched on, a person is enrolled automatically on their first failure (data entered, or a click in training-on-click mode). The course matches the channel – phishing, smishing or quishing.

- **New learners** receive an e-mail "Welcome to AutoPhish Security Training" with their login details and change their password at first login.
- **Existing learners** receive "Security training has been assigned to you".
- If someone fails again while a course is still open, they get a reminder that their training is still assigned. Their progress is kept.

There is no self-registration – only people enrolled by AutoPhish can log in.

## Track completion

- **Microtraining completed** – shown on the Dashboard, in **Phishing → Reports** and in the PDF report (completed ÷ started).
- **Course completions** – how many people completed all assigned courses, out of those assigned.
- Completion status is synchronised from the training platform every few minutes, so it can lag a little.

## Reminders for admins

Company admins receive a weekly e-mail (on Mondays) listing training assignments that have been open for more than 7 days. This is on by default – you can switch it off with **Security notifications** under **Settings → Account**.

## Good to know

- Automated security scanners and bots never trigger training – only real people do.
- If microtraining is off, no platform training is assigned either.
- Training completed after a risky action is reflected positively in the risk figures.