Settings and security
The app's settings, locking the Tenvara app with Face ID or your fingerprint, how your sign-in and secrets are protected, and signing out.
On a phone, Settings is under More. On a tablet it is at the bottom of the rail.
What Settings shows
- Signed in: your name, your work email and your role, such as Administrator or Technician.
- Server: the name and address of the Tenvara server the app is connected to, and its version.
- App:
- Appearance: light or dark.
- Security: the app lock (see below). The row says whether it is on.
- Sync: changes waiting to be sent, and any conflicts. See Working offline and sync conflicts.
- About: the version of the app. Quote it when you contact support.
- Account: Sign out.
Lock the app with Face ID or your fingerprint
Your phone may be in a van, on a customer's desk or in a colleague's hand. The app lock makes sure nobody else can open Tenvara on it.
- Open Settings > Security.
- Turn on Unlock with Face ID (on Android, your fingerprint).
- Confirm with Face ID or your fingerprint when the phone asks.
From then on, the app locks when you leave it, and opens again with Face ID or your fingerprint when you come back. The locked screen says Tenvara is locked, with your name and server, and a button to unlock and carry on where you left off. Sign out on the same screen signs you out instead.

Revealing a password in Docs also checks it is you with Face ID or your fingerprint.
How your sign-in and data are protected
- Your sign-in is kept in the phone's secure storage: the Keychain on iPhone and iPad, and the Keystore on Android. Other apps cannot read it.
- Passwords and credentials you reveal are not saved on the phone. They are fetched from the server each time and hidden again after a short time. The exception is a sealed, expiring copy for a visit, and only where an administrator has switched on Offline passwords for visits for your role. See Schedule and visits.
- Every reveal, copy and two-factor code is recorded in the vault audit log, with your name, the time and, when you were working on a ticket, visit or device, what it was. See Reviews and the vault audit log.
- The same rules as the web: your role, permissions and two-factor apply in the app exactly as they do in the browser. If an administrator deactivates your account, the app is signed out too.
Your phones on the web
Settings > Mobile app in Tenvara on the web lists, under Your phones, every phone signed in to your account: the app and the phone's system, how it signed in, its address, when it was last seen and when the sign-in ends. From there you can:
- press Sign out to end the session on a phone you no longer use;
- press This wasn't me for a sign-in you do not recognise: it ends that sign-in at once and takes you to change your password.

The same page holds your choices for the app, such as Let my phone follow my desktop, and, for administrators, the switches for everyone on the install. See Settings > Mobile app.
Signing out
- Open Settings.
- Check Sync says Everything is synced, so nothing you did offline is left behind.
- Under Account, press Sign out.
Signing out ends your session on the server, not just on the phone, and removes your sign-in from the phone. The next person to open the app has to sign in with their own account.
If you lose your phone
Sign the phone out straight away: open Settings > Mobile app on the web and press Sign out beside it under Your phones. Then tell an administrator. Changing your password on the web also signs you out everywhere else, including the app on the lost phone, and an administrator can deactivate an account if needed. See Signing in and Users.
Was this page helpful?
Thanks for the feedback.