PIN lock

How a shared screen stays shared without becoming anonymous.

Restaurant → Settings → Reservations & booking → Staff screen lock

The problem it solves

A till or a kitchen screen in a busy restaurant is signed in all day. Nobody signs out between customers, and a screen that asked for a password every few minutes would be turned off within a week.

So the screen locks itself when idle and reopens on a 4-digit PIN. Fast enough to be used, and enough to stop somebody wandering behind the counter and refunding an order.

Setting it

Staff screen lock is a number of idle seconds, in Settings → Reservations & booking. 0 means never.

SettingSuits
60–120 secondsA till in reach of customers.
300+ secondsA kitchen screen nobody but staff can touch.
0 (never)A screen in a locked office. Rarely the right answer anywhere else.

The lock can also be engaged deliberately from the dashboard menu — worth doing when stepping away rather than waiting for the timer.

Unlocking

The lock screen shows who is signed in and their department, with a keypad for the PIN. There is also Not you? Sign out, which is how the screen changes hands at the end of a shift.

PINs are set on Staff, and every staff member has one.

Wrong PINs back off, deliberately. A four-digit PIN is only ten thousand values, so after about five wrong attempts a wait is imposed and grows. A correct PIN clears it. If somebody is locked out mid-service, waiting is the fix — trying faster makes it worse.
  1. Who is locked, and their role — so the next person knows whose shift is open.
  2. On a demo install the PIN is shown here. It is not shown on a real one.
  3. Four dots fill as the PIN is typed on the keypad.
  4. Not you? Sign out ends the shift and returns to the sign-in screen.

The lock covers the screen entirely — the dashboard behind it cannot be read or used.

The locked screen
The locked screen. Click to enlarge.

It is what makes the reports honest

Every action is recorded against whoever is signed in. Without a lock, one login covers a whole shift and staff reports record that "the manager" did everything. With it, the screen changes hands properly and the record follows.

The same PIN authorises a void or a large discount at the till — so approving something is attributable to a person rather than to whoever the screen happened to be logged in as.

When it doesn't work

The screen never locks

The setting is 0, or the signed-in account has no PIN. Both stop it.

"Too many attempts"

Wait the stated time. A correct PIN then clears the back-off entirely.

Somebody forgot their PIN

Set a new one on Staff. It takes effect at once, and their password is untouched.

It locks too often

Raise the seconds. A till nobody can keep unlocked will end up with the setting at 0, which is worse than a longer timer.