Microtraining and Training after a Simulation
People learn best right after they made a mistake. AutoPhish therefore shows a short learning unit (microtraining) directly after someone falls for a simulation and can automatically enrol them in a longer course on the AutoPhish Training Platform. This article explains what your staff see and how you configure it.
What people see after falling for a simulation
By default, when someone enters data on the simulated login page, they land on the microtraining page instead:
- "This Was a Security Exercise" – a clear, non-judgemental message that this was a simulation.
- "Let's Spot the Red Flags" – a step-by-step walkthrough of 3–5 warning signs, highlighted in the exact message they received.
- "Why This Almost Worked" – the psychological trick behind the message (urgency, authority, curiosity …).
- A closing call to action to report suspicious messages in future.
The page uses your company logo and colours. If training on the platform is assigned, a button Access Training Platform is shown.
Variants:
- Training on click: If enabled, the click on the link itself opens the lesson "Why a click can be risky" – no login page is shown.
- Printed QR posters: People who scan a poster and enter data on the landing page get a short QR-specific lesson.
Configure training per campaign
Training is set per campaign in the Training step of the campaign wizard (also available when you edit a campaign):
Option | What it does |
|---|---|
Show microtraining page | Shows the microtraining after a failure (on by default). If off, people only see "Invalid username or password." and no AutoPhish training follows. |
Assign AutoPhish Training Platform | Automatically enrols people in a course after their first failure (on by default). |
Skip landing page – send to training on click | Sends people to the microtraining as soon as they click, without a login page. Not available for printed QR codes. |
External training redirect URL | Sends people to your own training instead. Cannot be combined with the AutoPhish Training Platform; completion of external training is not tracked in AutoPhish. |
Customize microtraining | Change the headline, message and footer texts. |
Use Preview microtraining and Preview AutoPhish Training to see exactly what your staff will get, then save the campaign.
Automatic enrolment in the AutoPhish Training Platform
When both microtraining and the platform are switched on, a person is enrolled automatically on their first failure (data entered, or a click in training-on-click mode). The course matches the channel – phishing, smishing or quishing.
- New learners receive an e-mail "Welcome to AutoPhish Security Training" with their login details and change their password at first login.
- Existing learners receive "Security training has been assigned to you".
- If someone fails again while a course is still open, they get a reminder that their training is still assigned. Their progress is kept.
There is no self-registration – only people enrolled by AutoPhish can log in.
Track completion
- Microtraining completed – shown on the Dashboard, in Phishing → Reports and in the PDF report (completed ÷ started).
- Course completions – how many people completed all assigned courses, out of those assigned.
- Completion status is synchronised from the training platform every few minutes, so it can lag a little.
Reminders for admins
Company admins receive a weekly e-mail (on Mondays) listing training assignments that have been open for more than 7 days. This is on by default – you can switch it off with Security notifications under Settings → Account.
Good to know
- Automated security scanners and bots never trigger training – only real people do.
- If microtraining is off, no platform training is assigned either.
- Training completed after a risky action is reflected positively in the risk figures.
Updated on: 27/10/2026
Thank you!