Screen lock, PIN and passkeys

Why there is a lock

A sign-in lasts 7 days, so you are not asked for your password and 2FA every morning. The trade-off is a browser left open on a shared desk. The screen lock covers that: after your chosen idle window with no mouse, keyboard or touch input, the dashboard shows a Screen locked overlay and nothing works until you clear it. The lock is enforced by the server, not just the page: while locked, every request is refused until you unlock.

Setting up your PIN

The first time you use the dashboard, a full-screen Set up your screen lock step appears. It cannot be skipped and there is no off switch.

1. 1.Choose a PIN of 4 to 8 digits. Repeated digits (1111) and simple runs (1234, 4321) are refused.
2. 2.Repeat the PIN, then enter your account password to prove it is you.
3. 3.Pick a Lock after window: 5, 15, 30 or 60 minutes, 4 hours or 12 hours. The default is 30 minutes. There is no “never”.
4. 4.Optionally add a passkey for this device.

Unlocking

Type your PIN into the overlay and you pick up exactly where you left off; calls that were in flight retry on their own. You get 5 attempts. Each wrong PIN tells you how many tries are left. The fifth wrong PIN signs you out everywhere, on every device, and you must sign in again with your password (and 2FA if enabled). The lockout is recorded in the audit log.

Only real activity keeps a session unlocked. Background polling of the fleet grid or an open server page does not count, so a dashboard left on a wall screen locks on schedule.

Passkeys

A passkey lets you unlock with Touch ID, Windows Hello or your phone instead of typing the PIN. Add one from Account → Security → Screen lock → Passkeys, or during first-time setup. Passkeys are per device and per dashboard address, so register one on each computer you use. The PIN always works as a fallback.

A passkey only clears the lock on an existing session. It is not a sign-in method and does not replace your password or 2FA.

Changing the window or the PIN

On Account → Security → Screen lock you can change the lock window, change the PIN (your password is required) and remove passkeys. Every change is audited.

Forgot your PIN

Sign out and sign back in. Signing in again with your password takes you through PIN setup, where you choose a new one. You do not need to contact support.

What is exempt

• •Read-only demo (viewer) accounts.
• •API calls made with a bearer token, including the mobile app and workspace API tokens; the app has its own biometric or PIN lock.