Team and security
Invite members, change roles, password, passkeys and second factor.
Invite your team
Under Users, in the Invitations section, enter the email address, choose the Role and Invite. Admins can invite admins, only the owner can invite further owners.
The invited person gets an email with a link. Without an account yet, they choose a name and password and accept with Accept invitation. With an existing account, they sign in and open the link again afterwards.
Open invitations shows until when an invitation is valid. There you can Send again or withdraw it. If the email did not go out, a notice says so and the invitation stays in place.
You invite models into the portal from their detail page and clients under Client accounts. See Models and Clients.
Change roles and remove members
The table of users shows role, last sign-in and the number of sign-ins. You change the role directly in the row, Remove ends the membership. The last owner can neither be removed nor downgraded.
Sign-in and password
Sign-in always happens on app.casttool.net. Forgot your password? sends a reset link by email. After several failed attempts, sign-in waits for a moment. Anyone who has not confirmed their address yet gets a new link when signing in.
Second factor
A second factor protects your account even if someone knows your password. Under Security there are three ways, and you do not need an app:
| Way | What you need | Good for |
|---|---|---|
| Passkey | Your device's fingerprint, face or PIN | Anyone who wants to sign in quickly and without a password |
| Authenticator app | An app such as Authy, Google Authenticator or 1Password | People who already use an app |
| Code by email | Just your mailbox | People who want neither a passkey nor an app |
You can set up several ways. After your password you then pick one of them. Platform accounts must have a second factor, and it must be a passkey or the authenticator app. The code by email is not available there.
Passkey
A passkey lives on your device, in your password manager or on a security key. When you sign in, you confirm it with your fingerprint, face or the device PIN. It only works on app.casttool.net and therefore cannot be phished.
Under Security, in the Passkeys section, enter your password and choose Confirm password. This lasts five minutes.
Optionally enter a name, for example "Laptop", and choose Add passkey.
Confirm the prompt on your device.
From then on you sign in with Sign in with a passkey, without email address and password. Many browsers also suggest the passkey right in the email field. If you sign in with your password, you confirm the second step with Confirm with a passkey.
In the list you can Rename any passkey and, after confirming your password again, Remove it. Ideally set up two passkeys, for example on your laptop and your phone. Then you still have a way in if one device is missing.
Authenticator app
Enter your password and choose Set up app.
Add the key shown to your app or choose Open in the authenticator app.
Keep the backup codes in a safe place. They are shown only this once.
Enter the Code from the app and Confirm.
From then on, sign-in asks for the code. Without your phone, Use a backup code helps, each code works once. Create new backup codes with your password gives you a fresh set, and the old ones stop working. Remove app with your password takes the app out again.
Code by email
Enter your password and choose Set up code by email.
Enter the Code from the email and Confirm.
From then on CastTool sends a six-digit code to your address after your password. It is valid for 10 minutes. If no email arrives, Send a new code helps; after five codes in one hour you have to wait a moment. If you also have an app, switch with Use a code by email. Turn off code by email with your password takes it out again.
The code is only as safe as your mailbox. Protect your mailbox with a second factor too.
Setting up further ways
If you already have a second factor, you can only add more in a session where you confirmed it when signing in. If the last factor is removed, every device has to confirm the next one again.