Your first step as an Emarsys user will be to verify that the email address associated with your user profile is correct. You do this by clicking the link on the invitation email that is sent to you when your profile is created. You will then need to set your password and complete the rest of the settings described below.

You will not be able to log in to the Platform before you verify your email address.

The verification process can also be triggered in other ways:

• If you do not log in to your account for 180 days your profile will be deactivated. Your Account Owner will then need to trigger the verification process before you can log in to the account again.
• Account Owners can also manually deactivate a user profile, for example to restrict access to the Platform for a period of time.

Here you can change your login user name, change your password, and enable two-step login authentication via smartphone app.

To maintain the security of your user profile,  Emarsys will ask you to change your password every 90 days. 

You can also do this at any time by clicking Change Password. This will send an email to the email address associated with your user, containing a link that will direct you to the reset password page.

Emarsys will evaluate your password and, if it passes the security criteria, will reset it for you.

All Emarsys users are required to use a suitably strong password. When entering a new password for the first time, the application will check its complexity and inform you if it is not complex enough. In addition to this:

• Passwords are valid for a maximum of 90 days, after which the application will require you to change it.
• You may be requested to change your passwords earlier than that, for example if a new security feature has been enabled for you, or if suspicious activity related to your account is detected.
• You cannot reuse any of your recent passwords.

We encourage you to use an established password management tool to take care of your passwords. Emarsys does not endorse any tool in particular, but advises you to choose the one that best suits your requirements. Examples of such tools are:

• LastPass
• Keypass
• 1Password

If a password is compromised (lost or stolen), you should immediately reset it on the Emarsys login page, or inform your Account Owner and ask them to verify your user profile. They can trigger an automated email to you and your user profile will be deactivated until you click the link in the email and change your password.

In this section you can change the following:

• Interface language: Available languages of the Emarsys interface:
  • English,
  • German,
  • French,
  • Turkish,
  • Russian,
  • Spanish,
  • Mandarin Chinese,
  • Japanese,
  • Korean,
  • Brazilian Portuguese,
  • Czech,
  • Polish

• Form default language: Default language of the fields used in forms and emails.
• Time zone

• Preferred date and time format
• Distance unit: To use in Geolocation segments, for example.

Here you can change your first name and last name (if your Account Owner did not enter them for you).

For security reasons, your access role and email address can only be changed by your Account Owner.

You should also verify your mobile phone number. This requires nothing more than entering the number and clicking Verify mobile number. You will then be asked to enter the code that Emarsys sends you via SMS.

Your mobile phone number will only be used for two-step authentication, if this is enabled by your Account Owner.

Finally, you can also define which web page in the Platform opens after you log in, by selecting from the Start page drop-down. The pages available here will depend on your Access role.

We offer the possibility to further enhance the security of user login by providing two-step authentication (also known as Two-factor Authentication or TFA).

Two-step authentication is enabled when the Account Owner activates IP access control on the Security Settings page. Once enabled, users can log in with their user name and password only from devices using recognized IP addresses (see IP Allowlist below). Otherwise they will also have to confirm their identity using one of the two following methods:

• Time-based authentication using a smartphone authenticator app (recommended)
  This requires a one-off synchronization between your smartphone authenticator app and our server (generally via a QR code). This process generates a shared secret between your phone and our application. One-time passwords are then generated using this secret, which allow you to log in securely.
  This method does not require any kind of mobile connectivity, which means deliverability issues are bypassed, and the login codes are generated every 30 seconds to avoid the possibility of them being reused. Authenticator applications are available for all major smartphone platforms.
• SMS or callback-based two-step authentication
  This requires a dedicated and verified mobile phone number for the authentication to be sent to. When logging in to the Emarsys application, a one-time password (typically a numeric code) is sent via the preferred channel, and you then use this code on along with your usual credentials to log in. It is valid for five minutes only, and lasts for the duration of your session. This means that you need to use a new code every time you log in.

Here you can enable our Emarsys teams to access your account.  

This access can be given by clicking Share Account Access in the Profile menu, and must be authorized by an active user from within your account.

When you enable Grant Emarsys teams access, you can specify the location of the team that can access your account. 

• Regional will restrict access to staff based in one of your regional Emarsys offices (these are grouped into the Americas, EMEA and APAC).
• Global will enable any Emarsys team around the world to access it. This is often the better option if you are enabling someone from the Product Development department.

Below this you must set the time period during which access is available.

You can end access at any time by deactivating the Grant Emarsys teams access checkbox.