Your account plan
New customer accounts start on Free with 1 owned workspace and 5 forms. Your plan applies to every workspace you own; workspaces you join retain their owner’s plan. View owned-workspace capacity in Workspace settings and form capacity in Forms or Usage & plan. Compare all workspace and form limits.
Your account and workspace
Sign in at app.formbastion.com to manage your forms and responses. Your profile holds your name, email, password, and security settings. Workspace membership determines which projects and submissions you can access.
Switch between workspaces
Open the workspace name in the navigation and choose another workspace you belong to. On a phone, open the navigation menu first. The selected workspace sets the context for Forms, Inbox, Activity, API keys, and Usage & plan. Your account and security settings are shared across your memberships.
Choose Manage workspaces in the switcher, or open Workspace settings, to review your memberships and owned-workspace allowance. Switching does not move forms or responses between workspaces or change anyone’s permissions.
Return from the public website
When your existing sign-in is recognized, the public navigation shows a link to your account and Open workspace. These take you back to your profile and current workspace. If you see Sign in instead, use it to return to the app.
Invite your team
Verify your email before creating or accepting invitations or managing team access. Each teammate verifies their own customer account.
Workspace owners and administrators can create invitations in the Team access section of Workspace settings. Copy the private invitation link and share it with the intended teammate. They can accept it with their own account.
| Role | Access |
|---|---|
| Owner | Manage the workspace, team, forms, and responses. |
| Administrator | Manage teammates, API keys, forms, and responses. |
| Member | Work with forms, submissions, exports, and attachments. |
| Viewer | Read forms and submissions without changing data or downloading files. |
Protect your sign-in
Verification and password reset emails use a clear action button, an expiry notice, and a copyable link. A plain-text version is included if your email app does not display HTML. These emails come from [email protected] and do not accept replies; use our contact page when you need help.
Account emails come from [email protected]. Open the verification link and confirm your address. Verification links expire after 24 hours and work once; opening a link alone does not verify your account. Request a replacement from Verify your email, at most once per minute and five times per hour. A replacement invalidates the previous link.
What verification unlocks
Before verification you can sign in, edit your profile, secure your account, create workspaces and projects, and prepare form drafts and their sources. Publishing or resuming forms, changing live sources, revealing webhook signing secrets, API access, team features, submissions, exports, attachments and activity history require your verified account.
A workspace needs at least one active, verified customer owner to receive submissions and run or replay webhooks. An unverified teammate does not pause a verified owner’s workspace; that teammate’s own access remains restricted. Verification confirms an email address, not a business or identity review.
Changing your email clears its verification, ends your other sessions and invalidates old verification links. Verify the new address to restore live privileges. If the workspace loses its last verified owner, intake stops and queued webhooks wait until an owner verifies. A delivery already in progress may complete.
Use a unique password and set up an authenticator from Your account. Enrollment provides eight single-use MFA backup codes. Store them securely so you can sign in if your authenticator is unavailable.
Recover your account
Choose Forgot your password? on the sign-in page to request a password reset email. Its single-use link expires after 30 minutes. Confirm a new password to end existing sessions; your authenticator stays enabled. Check your spam folder if the email has not arrived.
Save the account recovery code beginning FB-R shown when you register, or generate a replacement in Your account. Use Recover account on the sign-in screen to set a new password with this code. Recovery ends your existing sessions and leaves authenticator protection enabled.
MFA backup codes beginning FB-M are used for the second sign-in factor. They are separate from your account recovery code, and each code can only be used once.
If you no longer have your recovery code, contact support for help verifying account ownership. Never send your password, authenticator secret, or recovery codes.
Review active access
Open Your account for the Profile & security page, where you can update your password, manage your authenticator and recovery options, and end other sessions. Workspace owners and administrators can review team membership in Workspace settings and revoke unused keys in API keys.