Security and Sessions
Manage sessions responsibly across web, mobile, and desktop.
Each Agiled platform keeps its own session state. Signing in on one device does not mean every other device is connected.
Review sessions whenever a device is replaced, shared, lost, repaired, or used by a contractor. Access should follow the person and device that still need the workspace.
Treat device access as part of workspace security. A correct role is not enough if an old laptop, phone, or browser profile still has a valid session.
Web Sessions
The web app uses your browser session. If you use a shared computer, sign out when you are done and avoid saving passwords in a browser profile you do not control.
Use separate browser profiles when you manage more than one organization or when you switch between admin and non-admin accounts.
Mobile Sessions
The mobile app stores its auth session in secure mobile storage. Use Sign out in the mobile app when you no longer want that device connected.
Desktop Sessions
The desktop app connects through a browser handoff and stores a desktop session locally. Use Sign out inside Agiled Desktop when the device should no longer have access.
If the browser handoff opens the wrong account, sign out in the browser first or use the browser profile that belongs to the intended Agiled account.
Workspace Access
Your available workspaces and modules are still controlled by your Agiled account, organization membership, enabled modules, roles, and permissions.
If you can sign in but cannot access a workspace or section, check:
- Whether you are in the correct organization.
- Whether your role includes the needed permission.
- Whether the module is enabled for the workspace.
- Whether you are using the web app for a feature that is not exposed in the mobile or desktop app yet.
Shared Device Checklist
- Sign out before leaving a shared device.
- Do not leave a desktop session connected on a computer other people use.
- Lock your phone or tablet with device security.
- Ask a workspace admin to review team access if a user should no longer access company data.
After Role or Employment Changes
Signing out of one device does not remove a user from the workspace. When a teammate leaves or changes responsibilities, update their workspace membership, roles, and direct permissions first, then ask them to sign out of connected devices.
Troubleshooting
If a user still sees old access after a role change, ask them to refresh the web app or sign out and back in. If access still looks wrong, review direct permissions and organization membership.
If a device is lost, remove or restrict the user's workspace access until the device situation is resolved.
Lost Device Response
When a device is lost or stolen:
- Change the account password if password sign-in is used.
- Ask an owner to review workspace membership and role access.
- Remove or restrict access for the affected user if needed.
- Review connected apps, API keys, and mailboxes owned by that account.
- Sign back in only from trusted devices.
If the device also had access to email, secure the email account first because password resets and verification messages depend on it.