Lock the app with Face ID or Touch ID

A phone left unlocked on a desk is a signed-in Turtini session. The app lock closes that: when you come back to Turtini after a minute away, it asks for Face ID or Touch ID before showing you anything.

Turn it on:
1. Open Account and go to Safety.
2. Switch on App lock.
3. Optionally set a backup PIN for that device.

It is already on for some people. If your account can reach money or other people's records -- you administer an organization, you have accountant access to someone's books, you can edit where payroll or member records live, or your personal account holds financial or health records -- the lock starts ON. If your account is a calendar and a grocery list, it starts OFF. Either way you can change it, and once you do, your choice sticks: we never turn it back on over your decision.

The switch follows your account. Turn it on here and it applies on every phone and tablet you sign in on. The PIN does not -- it belongs to the one device you set it on, is stored only there, and is never sent to Turtini. Set one on each device you want it on.

What happens when you switch apps:
- Under a minute away -- checking a text, copying a code from your authenticator -- you come straight back in.
- Longer than that, or after the app was fully closed, it locks.
- If a card reader is paired, a kiosk is open, or a payment is in flight, it does not lock at all. An event is never interrupted by a lock screen.

While it is locked, the screen behind the lock is blurred, and the preview iOS shows in the app switcher is covered so nothing readable sits there.

If Face ID does not work:
There is always another way in, in this order -- Face ID or Touch ID, then your device PIN, then your Turtini password, then Sign out. That last one always works, on any device, with no setup. If Face ID is unavailable because it is not set up, because Turtini was not given permission, or because iOS locked it after too many tries, the lock screen says which and moves you down the list. After five wrong PIN tries the PIN is retired for that attempt and your password takes over -- you are never shut out.

This is not the same as the extra verification you get asked for on a large refund or a payout change. That one proves who you are to Turtini's servers for that specific action. The app lock proves who is holding the phone. Passing one never skips the other.

The app lock runs in the Turtini app on a phone or tablet. On the web, your browser and computer sign-in do that job.