Sign-ins and sessions
How long Agoo keeps you signed in, where you're signed in, the alert for a new device, and how Owners and Admins sign someone out everywhere or make sign-ins shorter.
Agoo is in early access. This page describes the feature as it ships to early-access organisations; screens are illustrative.
Agoo keeps you signed in on the browsers and phones you use, so you aren't typing your password and authenticator code all day, and it shows you every one of them, so nothing stays signed in that you don't know about.
How long you stay signed in
| Where | How long |
|---|---|
| The Console | With Keep me signed in (ticked when you sign in): 30 days, or until the browser is unused for 7 days. Unticked, for a shared or public computer: until you close the browser, 12 hours at most. |
| The Agoo Workspace app | It opens with your phone's own lock every time: Face ID, Touch ID or the passcode on iPhone and iPad; fingerprint, face unlock or screen lock on Android. Your password (and authenticator code) every 30 days, or after 14 days without opening it. |
When a sign-in ends, Agoo asks for your password again, and for your authenticator code if you use two-step verification. Your organisation can make both lengths shorter (below); if you belong to more than one organisation, the shortest applies.
Where you're signed in
Account → Sign-in and security → Where you're signed in (in the Console), or Account → Where you're signed in (in the app), lists every browser and phone signed in to your account:
- What it is: Chrome on Windows, Safari on iPad, an iPhone with the Agoo Workspace app.
- Roughly where: the town and country its internet address points to. It's approximate, and a mobile network or a VPN can put it somewhere else.
- When it was last used, and whether it passed two-step verification.
Sign out any of them, and it stops working at once. Sign out everywhere else ends all but the one you're using. Below them, Earlier sign-ins shows the last 90 days', with how each ended (signed out, ended by you, ended by your organisation, unused for a while, or reached its time limit).
New sign-in alerts
When your account is signed in to on a device it hasn't been used on in the last 90 days, Agoo emails you straight away, and sends a notification to your phone if you have the Agoo Workspace app. They say what the device is, which part of Agoo, and roughly where. If it was you, there's nothing to do.
If it wasn't you:
- Open Where you're signed in and Sign out that device.
- Change your password (Account → Sign-in and security → Password).
- Turn on two-step verification if you haven't: it stops anyone who only has your password.
Agoo also emails you when your password, your sign-in email or your authenticators change. These emails can't be turned off: they keep your account safe.
For Owners and Admins
Sign someone out everywhere
For a lost or stolen phone, a shared password, or someone leaving: open them in People, then Where they're signed in shows their browsers and phones. Sign out everywhere ends every one at once, with an optional reason for the audit trail. They can sign in again with their password unless you also remove their sign-in. Admins can't sign out the Owner. The Owner ends their own sign-ins from Account → Sign-in and security.
Make sign-ins shorter
Settings → Security → How long sign-ins last sets, for everyone in your organisation:
- The Console, with Keep me signed in: 30 days (Agoo's), 14, 7 or 1.
- Agoo Workspace: password again every: 30 days (Agoo's), 14, 7 or 1.
You can only make them shorter. Sign-ins already past a new length end within the hour. Both are on every plan, and changes are in the audit trail.