Device Management
Control device access, sessions, and security measures
Device management overview
Administrators use Device Management to control staff access across devices, manage active sessions, and apply additional security measures.
Active devices
Open Settings > General > Manage Profile to open your Account settings, then select Security > Active devices to review your personal sign-in sessions.
This is separate from Settings > Devices, which shows Connected devices and Terminal reader management for the organisation. In demo mode, Register card reader is disabled.
TOTP on new devices
When enabled, Time-based One-Time Passwords (TOTP) are required when a user signs in on a new device.
This adds an extra layer of security by:
- Verifying user identity beyond email and password
- Preventing unauthorised access from unknown devices
- Reducing risk if credentials are compromised
TOTP challenges are triggered automatically for new or unrecognised devices.
Session management
Session Management controls how long users remain logged in and how sessions behave across devices.
This includes:
- Tracking active user sessions
- Ending sessions manually or automatically
- Managing session expiry based on security settings
Session controls help balance security with usability, especially for shared or public devices.
Configurable two-factor authentication (2FA)
Tiquo supports configurable two-factor authentication at organisation level.
Administrators can:
- Enable or disable 2FA requirements
- Use Settings > General > Require two-factor authentication to require every organisation member to set up 2FA
- Combine 2FA with device and session rules for stronger protection
The same 2FA settings apply to web, mobile, and POS access.