Your account

Signing up

You'll need:

• your business name,
• the web address for your login page — checked as you type, so you know straight away whether it's free,
• your email and a password of at least 10 characters.

We then email you a confirmation link. Your account and login page stay inactive until you click it, which stops anyone signing up with an address that isn't theirs.

Didn't get the email? Check your spam folder, then use the request a new link option on the "Check your email" screen.

"That address is taken"? Someone already has that web address. Try adding your town or a word, e.g. lakeside-accra.

Signing in

Sign in with your email and password. There's no separate account or company ID to remember — your email identifies you.

Forgotten password

Click Forgot password on the sign-in page and enter your email. If it belongs to an account, we send a reset link.

• The link works for one hour, and only once.
• Requesting a new link cancels any earlier ones.
• Resetting your password also confirms your email, if you hadn't yet.

For your security, the page says the same thing whether or not the email has an account, so nobody can use it to find out who's registered.

Your profile

Select your role at the bottom of the menu to open My profile.

• Name: change it any time.
• Password: changing it signs you out of every other browser. You're emailed to say it changed.
• Sign-in address: enter the new one and your password, then open the link we send to it. Until you do, keep signing in with the old address, which is told about the change.

Two-step sign-in

Two-step sign-in asks for a 6-digit code from an authenticator app on your phone after your password, so someone who learns your password still can't get in. It's optional and set up per person. We recommend it for owners and admins.

1. Install an authenticator app: Google Authenticator, Microsoft Authenticator, 1Password or similar.
2. My profile → Two-step sign-in → Turn on, and enter your password.
3. Scan the QR code with the app, or type the key shown under it.
4. Enter the code the app shows. Two-step is now on.
5. Save the ten recovery codes shown next. Each one signs you in once if you lose your phone, and they aren't shown again.

From then on, signing in asks for the current code after your password. Five wrong codes, or five minutes, and you start again from your password.

• Lost your phone? Select Use a recovery code on the sign-in page. You're emailed when one is used. Make new ones under My profile.
• No phone and no recovery codes? An owner or admin can turn two-step off for you under Staff → Reset 2-step (only an owner can, for an owner). Sign in with your password and set it up again.
• Turning it off yourself needs your password and a current code.

Requiring it

An owner can require two-step sign-in for the whole organisation under Account → Two-step sign-in:

• Optional: each person decides. This is the default.
• Required for owners and admins: the people who can change settings, refund payments and manage staff.
• Required for everyone: every role, viewers included.

You need two-step on for yourself before you can require it. When you save, everyone it newly covers who hasn't set it up is signed out and emailed. The next time they sign in with their password, they're shown the QR code, set it up there and then, save their recovery codes, and carry on. Nobody is locked out. Staff shows who still has to set it up.

While it's required, people can't turn it off for themselves. If someone loses their phone and recovery codes, Reset 2-step under Staff lets them set it up again at their next sign-in.

Staff

Owners and admins add and manage people under Staff.

• Invite someone with their email and a role. They get a link, valid for 7 days, to choose their password. Until then they're listed as invited, and you can resend or withdraw the invitation.
• Change a role from the list. It applies straight away, even in a browser they're already signed in on.
• Deactivate someone who's left. They're signed out everywhere at once and can't sign in again. What they did stays in the audit log; you can reactivate them later.
• Reset 2-step turns off two-step sign-in for someone who has lost both their phone and their recovery codes. They're emailed when it happens.
• Nobody can change their own role or deactivate themselves, only owners can manage owners, and there's always at least one owner.
• Each email address can sign in to one organisation. For someone already on Oculus with another organisation, use a different address. A plus-address such as name+venue@example.com works.

Changing your organisation's details

Your organisation name, billing name, billing email, address and tax ID appear on your Oculus invoices, so changes are checked by Oculus before they take effect.

1. Go to Account → Request a change, edit what you need, and say why if you like.
2. Changing the billing email? We send a confirmation link to the new address first. The change goes for review once you open it, so a typo can't send your invoices somewhere nobody reads.
3. You get an email when it's approved or declined. Until then you can Cancel this change.

Invoices already issued keep the details they were issued with.

Router alerts and the session log

Both are under Account → Router alerts and session log, and owners and admins can change them.

Router alerts. When a router stops checking in for 15 minutes, comes back, or its clock is more than two minutes out, owners and admins get an email. If several routers change at once, as in a power cut, it's one email. A router that drops again within six hours isn't emailed about twice. Turn the emails off here; the alerts still show under Devices and on the Overview.

Session log. Oculus keeps a record of every session: who connected, from which device, when and for how long. Choose how long it's kept. Older sessions are deleted every night. Reports and charts keep their totals. Oculus sets the shortest and longest you can choose; some countries require connection logs to be kept for a minimum period.

Deleting your organisation

Only the owner can do this, from Account → Delete organisation. You'll be asked to type your organisation's web address and your password.

• Nothing is removed for 7 days. Everything keeps working, everyone signed in sees a warning, and the owner can Cancel the deletion from Account. The owner and your billing email are emailed when it's scheduled.
• After that, everything is deleted for good: sites, router connections, packages, vouchers, sessions, reports, your customers' purchases and contact details, staff accounts, and your payment and SMS settings. It can't be recovered.
• Your routers stop accepting logins. Take Oculus off them with the router clean-up script, or customers will see a login page that no longer works.
• Oculus keeps its invoices to you, with the billing details on them, because tax records must be kept. Any unpaid invoice is still owed.

Keeping your account secure

• Use a password you don't use anywhere else.
• Payment and SMS keys are encrypted once saved and are never shown again.
• Router passwords appear only once, in the onboarding script.