Session and security

Two decisions for the whole workshop: after how long idle the app signs out, and whether every account must sign in with a second factor. The second factor is a code from an app on the phone.

01What it is

Session time is the idle time after which the app signs out. It is 30 minutes by default, and your own time can be set from 45 to 240 minutes in steps of 15.

The second sign-in factor is a code from an app on the phone, with no texts or e-mails. When the account owner requires it for all accounts, anyone without a second factor reaches only its setup screen after the password.

There are no backup codes, so turning the requirement on needs a second person with Configuration: edit who can remove the second factor if needed.

AUTOMATIC SIGN-OUT: 30 minutes or your own time up to 4 hours.
A CODE FROM THE PHONE: No texts or e-mails.
THE OWNER DECIDES: The account owner turns the requirement on for all accounts.

02What it is for

A password is not enough

The second factor protects customer data even after a password leak.

The front desk computer

A short session signs out an unattended workstation.

Trusted browser

On a trusted device no code is needed for 30 days.

03Main options

The screen has two parts: session time and the second sign-in factor.

When to sign out

Idle time for every account in the workshop.

Automatic: 30 minutes
Your own time: from 45 to 240 minutes in steps of 15

04Tasks step by step

STEP 1Make sure a second person has Configuration: edit.
STEP 2As the account owner open Settings › Session and security and turn on the second factor requirement.
STEP 3Anyone without a second factor sets it up at their next sign-in.

05Actions

The most common tasks around security.

Session time

Automatic sign-out after idle time.

Require a second factor

A phone code for every account.

06What it connects to

Choose a module to see related account settings.

YOUR ACCOUNT

My account

You turn on the second factor for your account in My account.

Go to the topicMy account