Signing in safely

A password you chose, a code by email every couple of days, and nothing about your payment details ever passing through here.

Two-step verification#

Signing in asks for your password and then a code sent to your email address. Once verified, that device stays trusted for 48 hours before it asks again.

Why it existsForty-eight hours is a deliberate middle. Every sign-in is the security posture people route around by never signing out; thirty days makes a stolen laptop useful for a month. Two days means a lost device stops working before anybody has finished filing the report, while somebody working a normal week is asked twice.

Forgetting your password#

Use Forgot password on the sign-in page. The reply is always the same sentence whether or not the address has an account — that is on purpose, so the form cannot be used to discover who has one. The link is single-use and expires in an hour.

Note

An administrator can email a reset link from Team → Edit user, which is the supported way to help a colleague. Nobody, including support, can read or set your password.

Invitations#

A new colleague receives a link and chooses their own password. You never see, set or send anyone's password, so there is no moment where one exists in a message that someone might forward. Your team and who sees what.

Payments#

Card details are handled by the payment provider, in their own interface, and are never stored by ScreenRoll. Nobody here can see a card number, including support.

Screens do not have passwords

A paired television holds a link that lets it fetch its own schedule and report its own plays. It cannot read your dashboard, see other screens, or change anything.