Locking and PIN

The mobile app and the web app keep you signed in so you are never locked out when you have no signal. To keep your surveys private, you lock the app and open it again with a PIN. You don't sign out.

Lock Instead of Signing Out

Tap the account icon, then Lock. The app hides everything behind the PIN screen but keeps your sign-in. Enter your PIN to carry on, online or off.

Sign out is a link under Lock. Signing out deletes your sign-in and your PIN from the device, and you need a connection to sign in again. The sign-out sheet also offers Lock instead.

Your PIN

After your first online sign-in the app asks you to set a PIN.

Length. 6 digits by default. Your organisation may allow 4 digits on phones. The web app always uses 6.
Where it is kept. On a phone, the PIN is kept as a salted hash in the Keychain (iPhone) or Keystore (Android), on that device only. The web app keeps your sign-in encrypted under your PIN.
Face ID or fingerprint. On phones, the app offers Face ID or fingerprint as an extra. It asks by itself when you open the app or come back to it. After you tap Lock yourself, it waits for you to tap the Face ID or fingerprint button. If it fails, the PIN keypad is always there. The web app has no Face ID or fingerprint, but you can type your PIN on the keyboard.
Switching Face ID or fingerprint on or off. Open Settings. Under PIN, the Open with Face ID switch turns it on or off. The name follows the phone: Open with Fingerprint, Open with Face unlock on an Android phone with face unlock, or Open with Biometric unlock when the phone doesn't say which. The switch shows only when the phone has Face ID or a fingerprint set up and you have a PIN. Switching it on asks you once to confirm with Face ID or your fingerprint. If that fails or you cancel, the switch stays off and the app says your PIN opens the app. Switching it off asks for nothing. It is in both the Inspector and HAMI Voice Lite apps, and never in the web app.
Reloads. In the web app, a reload or a new tab asks for the PIN.

When the App Locks

Idle lock. The app locks after 30 minutes unused by default. Your organisation can set it from 1 to 240 minutes. Time in the background counts as idle.
Voice surveys. The idle lock waits while a voice survey is on screen, and starts again when you leave it.
Opening the app. A phone that has been closed opens locked.

Wrong PINs

You have 5 tries. After that, each wrong PIN makes you wait before the next try: 30 seconds, then 1 minute, then 5 minutes, then 15 minutes for every try after. The wait survives closing the app. A correct PIN starts you again from zero.

Working Offline

Your sign-in lasts the offline allowance: 14 days by default, from 1 to 30 days, set by your organisation (see Phone Lock Settings below). Every time the app reaches the server, the allowance starts again. When it runs out, you sign in online. The surveys on your device stay.

Signing Out Offline

When you are offline, the sign-out sheet warns that you won't be able to sign back in, or open your surveys, until you have signal. To go ahead, type SIGN OUT in the box. You can choose Remove survey data from this phone. Lock instead is always on offer.

Forgot Your PIN?

On the lock screen, tap Forgot PIN?

With signal, you sign in again as yourself, with your password or your organisation's Microsoft or Google sign-in. Your surveys stay on the phone, and you choose a new PIN. Another person's account is refused. You can also tap Use an admin code instead.

Without signal, use an admin code:

The screen shows a 10-digit number. Call your administrator and read it out.
Your administrator reads back an 8-digit code.
Type the code, then choose a new PIN. You stay signed in.

A code works once, on that device, for 15 minutes. After 5 wrong codes, or after 15 minutes, the screen shows a new number. The web app can show up to 5 numbers while locked, then needs an online sign-in.

For Administrators: Phone Lock Settings

Three settings control how phones lock and how long they work offline. They sit at the top of the same page as the unlock codes.

Inspector. Open Settings → PIN Unlock Codes. You need the settings administrator role.

HAMI Voice Lite. The team owner opens Settings → Account → Make a PIN unlock code.

Under Phone lock settings, set:

Days a phone can work without reaching the server. 1 to 30. The default is 14.
Shortest PIN. 6 digits, or allow 4. This applies to phones only. The web app always uses 6.
Minutes unused before a phone locks. 1 to 240. The default is 30. A phone never locks during a voice survey.

Choose Save settings. A phone picks up a change the next time it reaches the server, so it keeps its old values until then. PINs already set stay as they are. Each change is logged.

For Administrators: Making an Unlock Code