← All documentation · Getting started
Creating your account and signing in
Web and mobile3 min readUpdated
Sign up once with your company name and email, and you own a company that everyone else joins by invitation — signing in afterwards with a password, a Google, Microsoft or Facebook account, or biometrics on the phone.
The first account in a company is the owner's, and it is the only one that starts from nothing. Everyone after that is invited into the company it created.
Starting the company
Signing up asks for four things: your company's name, your name, an email address and a password. That is enough to create the company, make you its owner, and seed it with a room and task library you can start quoting from the same afternoon — see Your room and task library.
Two things are set from your surroundings rather than asked for. Your time zone comes from the device you signed up on, so quotes and visits are dated in your own zone from the first one. Your language follows your browser, and can be changed later.
If you signed up from the phone app, the same form is there, and a verification step runs in a sheet for that one moment — it is the only part of the app that opens a web view.
Signing in
You can sign in with your password or with a Google, Microsoft or Facebook account. These are credentials on one account rather than separate accounts, so you can mix them freely: sign up with a password and add Google later, or the other way round. Losing access to one never locks you out while another still works, and disconnecting one that has been compromised signs out every other session at the same time.
A few details that matter when something goes wrong:
- Repeated failures, not normal ones, get a bot check. Signing in correctly stays one click. Only after several failed attempts does a challenge appear.
- Your sign-in session lives on the server, with a secure cookie that browser scripts cannot read. Offline mode is separate: the browser may keep a small recent working set on the device, such as customers, quotes, invoices, worksheets and unfinished quote or inspection work. It is separated by signed-in user, company and location, and it cannot be used to sign in. On a shared computer, sign out when you finish and clear BlastoClean's stored site data if you also want to remove the device copy.
- Forgot your password sends a reset link to the address on the account. If your account has no password — because you only ever used Google — signing in with Google is the way back, and setting a password afterwards is optional.
On the phone
The iPhone and Android app signs in to the same company with the same credentials, and stores its session in the platform keychain or keystore rather than in a file. Once you are in, you can turn on biometric app lock in Settings: Face ID, Touch ID or Android biometrics, with the device passcode as the fallback for the times a fingerprint will not read.
The Advanced expander under the sign-in button points the app at a different deployment. Almost nobody needs it — it exists for staging and local development, and the app talks to the production server without it.
Adding your team
New people are invited from Settings → Team, which is also where roles are set and access is taken away again. What each role may do, and what happens the moment you change one, is in Team, roles and permissions.