Set up your workspace

Sign up and create your workspace first (see Welcome to Phishtime). Then collect written authorization to run simulations, and note the email domains your employees use. To give other people Company Admin access, add them under Settings → Access & security → Accounts.

Before you begin

Steps

Sign in at your Phishtime login page with the account you created at signup.
Open the Dashboard, your home screen after signing in. It shows running campaigns, open, click and submission rates, and recent activity.
Open Settings → Access & security. To require MFA for every Company Admin, turn on the two-factor authentication policy. Each admin then sets up an authenticator app from Profile → Two-factor authentication.
Open Settings → Domains & network → Verified domains. Add the email domains your employees use (for example acme.com), publish the DNS TXT record shown, then click Verify. A verified domain does two things: you can send simulation email from it, and you can target employees whose address uses it.
Add your people: one at a time, by CSV import, or by connecting Microsoft Entra ID. See Add, import, and organize recipients.
Open the Company overview page, from the i button next to your company name in the sidebar. Its setup checklist tracks employees added, a recipient domain verified, and sending configured. On paid plans it also tracks DKIM signing, and directory sync and SOC mailbox if you use them.

Branding your instance

Custom branding is on the Pro and Enterprise plans, and during the free trial. Open Settings → Branding to set a display name, support email, logo, and welcome image. These appear on the awareness pages employees see and in reports.

Once your people are in and a sending method is set, you can build your first campaign.