How client access works
Your client uses a private link instead of a password. Here is what that means, and what they can and cannot reach.
Clients do not get accounts. They get a private link. That is a deliberate trade, and it is worth understanding it rather than being surprised by it.
Why no password
Because passwords are where document collection goes to die. Every account you ask a client to create is a reason for them not to send you the thing. The link removes that, and it is the single biggest reason clients actually respond.
What the link opens
One client's page, for the work you sent them. On it they can:
- See the documents you asked for.
- Upload their files.
- Sign what you sent to be signed.
- Message you.
- Pay their invoice.
- Download the finished work.
It does not open anyone else's documents, and it does not open your firm's side of Vylan.
Treat it like a key
The link is private, and it is not a public address someone could guess. But anyone holding it can open that page, so it is worth telling clients the same thing you would about any private link: do not forward it on.
You can always resend a link, and every reminder carries it again. So a client who lost theirs is a moment's work, not a support case.
Your own account is different
None of this applies to you. Your firm's side is a real account with a real password, and you should turn on two-factor. See two-factor login.