Skip to content

Campaigns

A campaign sends the same request to a list of people at once: for example, asking every member of a team for a service account password before a migration. Each person gets their own link, and each submission is encrypted to the technicians you choose, as with a single request. For: Technicians, Admins and Owners on Team and above (up to 500 people a campaign on Team, 2,000 on MSP).

  1. Go to Campaigns and choose New campaign.
  2. Give it a name, pick the template and say why you need it: this is recorded in the audit trail for every request in the campaign.
  3. Add the roster: one person per line, as Name, email, phone (email and phone are optional). You can paste straight from a spreadsheet, or add people from your directory.
  4. Choose how long to keep each credential (Keep for), the verification, and how to deliver the links: by email, by text, or just create them so you can copy them yourself.
  5. Choose who can reveal the submissions, then start the campaign.

Emails and texts go out gradually, not all at once. A burst of near-identical messages to many people is exactly what mail providers treat as bulk mail, so SafeHanded spreads them out:

  • from your own mailbox: about 60 a minute;
  • from SafeHanded’s address: about 20 a minute, and up to 1,000 campaign emails a day (any more go out the next day, as long as the link is still valid);
  • by text: about 30 a minute.

A 500-person campaign from your own mailbox is out in under 10 minutes; from SafeHanded’s address it takes about 25. The campaign page lists everyone and how far their request has got.

  1. Send from your own mailbox. Connect your Microsoft 365 mailbox or your SMTP server (Team and above), under Send mail from your mailbox. Email from your own domain to your own staff is internal mail: it passes your SPF, DKIM and DMARC and is almost never junked. This is the single biggest improvement.
  2. Tell people first. A short note from IT (“you’ll get a SafeHanded link from us today, here’s why”) means people expect it, open it, and don’t report it as phishing, which also trains filters.
  3. If you send from SafeHanded’s address, ask your mail administrator to allow mail from safehanded.com (in Microsoft 365, an allow entry in the Tenant Allow/Block List or a mail flow rule). SafeHanded’s mail is signed with DKIM and covered by SPF and DMARC for safehanded.com.
  4. Keep the roster clean. Bounces from old or mistyped addresses count against a sender. Remove people who have left before you start.
  5. Give a clear reason. People’s pages show who is asking, not “why you need it” (that goes to the audit trail), so put a specific reason (“for the move to the new payroll system on Friday”) in your heads-up note from step 2. It reassures people that the request is genuine.