Team and security

Invite a team member

1. Go to Settings > Business Details and scroll to Staff roles.
2. Press Create Invite....
3. Enter their Email and pick their Role.
4. Press Send invite.

They get an email with a link to join. Until they accept, they show as Invite pending..., with Resend to send the email again and Revoke to cancel it.

Each plan includes a number of team members, and pending invites count. When all are taken, you'll need a bigger plan first. Account and plan covers changing plan.

An owner can change anyone's role from the badge next to their name. Only owners can change the plan, domains and the web address.

Removing a team member can't be done in Settings yet. Ask support@centralsoftware.au to remove them.

Signing in

At the sign-in page, enter the email address first. centralOS then asks for what that account uses:

• a password, with Forgot password? to get a reset link by email;
• a code sent by email;
• Continue with Google or Continue with Microsoft, for accounts that sign in that way. Forgot password? emails a link to add a password, and from then on the sign-in page asks for the password;
• Passkey, to sign in with a fingerprint, face or device PIN.

Two-factor authentication

Every login needs a passkey or an authenticator app. Someone who has neither sees Protect your account after signing in, and can't continue until they press Add a passkey or Set up an authenticator app.

Two-factor adds a 6-digit code from an authenticator app, such as Google Authenticator or 1Password, after the password or after Google or Microsoft.

1. Go to Settings > Security.
2. Under Two-factor authentication, press Set up authenticator app and enter your password if you have one.
3. Scan the QR code with the authenticator app.
4. Enter the code from the app and press Turn on.
5. Save the Backup codes somewhere safe. Each one works once, for signing in without the phone.

When signing in after that, enter the code from the app, or press Use a backup code instead. Delete turns two-factor off, but only while you have a passkey.

Someone with a passkey and no authenticator app who signs in with a password, Google or Microsoft is then asked for the passkey.

Passkeys

A passkey signs in with a fingerprint, face or the device's PIN, with no password to type. Under Passkeys in Settings > Security, press Add a passkey and follow the device's prompts. If it asks you to, sign out and in again first.

Each passkey is listed with whether it's synced across your devices or on this device only, and can be removed there. The last one can't be removed unless the authenticator app is on.

Delete the business

Only an owner can do this, in Settings > Security > Delete account. You type the business name to confirm.

Everything in the business is deleted for every member, including contacts, invoices, banking, files, emails, the website and its domains. The plan ends straight away with no refund, and anyone who isn't in another business loses their login. It can't be undone.

A domain bought through centralOS stops renewing. Support can help move it elsewhere before it lapses. A connected Stripe account stays yours, to close in Stripe if it's no longer needed.