# Accounts and organizations

> Sign in only when you need to, manage several companies and domains, invite your team and create API keys.

You don't need an account for the free checks. You create one when you're ready to pay, and everything you did before moves into it automatically.

## Signing in

We use secure single sign-on (through WorkOS): sign in with your work email, or your company's identity provider if it's set up. When you sign in, any domains you checked in that browser (or through a resume link) are **claimed** into your current organization in one step.

If your organization already has an application for the same domain, we keep the more advanced one (a paid one wins over an unpaid one) and archive the other, so you never end up with duplicates.

## Organizations

An organization is a company (or a client, if you're an agency). You can:

- belong to **several organizations** and switch between them,
- add **several domains** to each organization, each with its own plan and certificate,
- invite teammates with a role (owner, admin or member).

Each organization has its own billing, domains, API keys and history, and separate **live** and **test** data. See [Test mode](https://getverifiedinbox.com/docs/test-mode.md).

## Domains

Each domain has its own application: its steps, statuses, certificate, renewal date and full history of events. Your dashboard shows what needs your attention across all of them.

## API keys

Create [API keys](https://getverifiedinbox.com/docs/glossary.md#api-key) in **Dashboard → Settings → API keys** for your tools or AI assistant.

- A key belongs to one organization and one environment: `vi_live_…` or `vi_test_…`.
- Give each key only the permissions it needs (scopes):

| Scope | Allows |
|---|---|
| `applications:read` | Reading applications, DNS records, certificates, orders |
| `applications:write` | Starting and updating applications, business details, logo approval, claiming drafts |
| `billing:write` | Creating checkout links (a person still has to pay) |
| `certificates:write` | Ordering, renewing, reissuing and revoking certificates |
| `support:write` | Contacting support |

- The full key is shown **once**, when you create it. Store it safely, and revoke keys you no longer use.

## Continuing on another device

Without an account, your progress is tied to your browser. To continue elsewhere, create a **resume link** from the wizard (or ask your AI assistant): it's single-use and valid for 24 hours. After you sign in, your account is all you need.

## Billing

Plans are billed per domain, per year, through Stripe. Invoices and payment methods are available from the billing portal in your dashboard. See [Pricing](https://getverifiedinbox.com/pricing.md).