Woosool Account
One sign-in for every Woosool app, with security you can see.
Woosool Account is where you sign in, protect your identity and manage your devices. Organisations get an Enterprise panel for users, domains and policies. Developers get a console to let people sign in to their own apps with Woosool and to connect their tools.
Overview
What you can do
- 01
Single sign-on everywhere
Sign in once and open Barid, Khazna, Qalam and the rest. Sign out everywhere, and every app follows.
- 02
2-Step Verification
Add an authenticator app code to your password, with backup codes for the day you lose your phone.
- 03
Passkeys
Sign in with your fingerprint, face or security key. Nothing to type, nothing to phish.
- 04
Sessions and sign-in alerts
See every active session and revoke any of them. A new device triggers an email alert right away.
- 05
Trusted mobile devices
Approve a new phone by matching a number on a device you already trust. Sign it out or wipe it remotely.
- 06
Enterprise panel
Manage users, roles and groups, verify your domains and decide which groups can use which apps.
- 07
Organisation security policies
Set a minimum password length, require 2-Step Verification, limit session length and allow passkeys.
- 08
Developers console
Let people sign in to your apps with their Woosool account, behind a clear consent screen. Create personal access keys and track usage per app.
- 09
Signed event notifications
Your apps receive signed notifications when something happens, so they can check where they came from. Resend one when you need to.
Also included
- Passwords of 12+ characters, checked against known breaches
- Recovery email verified by code
- Password reset still asks for your 2-Step code
- Notification centre for account activity
- Download a copy of your data
- Account deletion with a 14-day grace period
- Sign-up open to all or by invitation
- Business sign-up with domain verification
- Role addresses and look-alike names reserved
- Step-by-step records to publish for your domain
- Org-wide device and session inventory
- Audit log
- Your branding on the sign-in page
- Data retention and organisation export
- Developer reference in the console
Connected
Works with the rest of Woosool
Verify a domain once in the Enterprise panel and use it for your team’s addresses in Barid.
Woosool for mobileApprove, sign out or wipe the Woosool apps on your phone from your account.
Woosool InjazInjaz uses your organisation and groups from Account, so access follows your team structure.
Woosool KhaznaEach app gets its own limited access. Access granted to Barid is refused by Khazna.
Security
Security and privacy
- Strong password storage
Passwords are stored in a scrambled form that is deliberately slow and costly to crack. Two-step secrets, signing keys and app secrets are encrypted at rest.
- Built against guessing
Sign-in is throttled per address and per account, with a lock and an unlock email. Sign-up asks for a small automatic check.
- Safe password resets
Reset links work only once and are stored scrambled. A reset signs out every session and cancels every app’s access.
- Security emails that stay on
Nineteen kinds of security emails, in English, Arabic and French. They can’t be switched off and carry no tracking pixels.
- No social sign-in
We don’t offer sign-in with third-party accounts. You use a password with 2-Step Verification, or a passkey.
Planned
Not available yet. These are on the roadmap, and we will say so here when they ship.
- Recovery by SMS
- Single sign-on with your company’s existing sign-in system
Woosool Account
Questions and answers
Can I sign in with an account from another company?
No, by design. You sign in with a password plus 2-Step Verification, or with a passkey, so no outside company sits between you and your account.
What happens if I lose my phone?
Use a backup code to sign in, then sign the phone out or wipe the Woosool apps on it from your account.
Who can create a Woosool account?
Sign-up is either open to everyone or by invitation, depending on the current registration mode. A personal account gets an @woosool.com address. To use your company’s domain, choose business sign-up: it creates your organisation, and mailboxes on the domain start working once you add a record to your domain that proves you own it.
Can I change my mind after deleting my account?
Yes. Deletion waits 14 days and you can cancel it during that time. It also asks for your password first.
Can my own apps use Woosool sign-in?
Yes. Woosool works as a standard sign-in provider. Register your app in the Developers console and people can sign in to it with their Woosool account.
Can an organisation require 2-Step Verification?
Yes. Admins set it as a policy in the Enterprise panel, along with password length, session length and passkeys.
One account. Every app. Your data.
Create a Woosool account and start with Barid, Yoom, Khazna and the rest of the suite.