Kiosk Mode & Login PIN

Secure shared clinic devices with a lock screen. Staff select their profile and enter a PIN to unlock. This guide covers enabling Login PIN, Kiosk Lock, and registering devices.

Why Use Kiosk Mode?

Dental clinics often share computers at the front desk or in treatment rooms. Without kiosk mode, anyone with physical access to an unlocked browser can view patient data, appointments, and financial information.

Key reasons to enable kiosk mode:

• Protect patient data - Each staff member must enter their PIN to access the system, preventing unauthorized browsing of sensitive records.
• Quick user switching - Doctors and staff can switch between accounts in seconds using a PIN, without logging out and back in.
• Auto-lock on inactivity - If a staff member walks away, the screen locks automatically after a configurable timeout.
• Progressive lockout - After repeated wrong PIN attempts, the account is temporarily locked with escalating durations (3 min → 5 min → 15 min → 1 hour → 24 hours).
• Audit trail - Security events are logged when PIN attempts fail or lockouts occur.

How It Works

Kiosk mode has three layers, enabled in order:

1. Login PIN - After logging in with email and password, users must also enter a 4–6 digit PIN for full access. This applies to all users on the account.
2. Kiosk Lock - On registered kiosk devices, a lock screen appears after a period of inactivity. Staff select their profile and enter their PIN to unlock.
3. Device Registration - Only browsers explicitly registered as kiosk devices show the lock screen. Your personal laptop won't be affected.

How the Lock Screen Works

When the lock screen appears on a kiosk device:

1. All team members are shown as profile cards with their name, photo, and role
2. Tap or click on your profile
3. A PIN keypad appears - enter your 4–6 digit PIN
4. Click Unlock
5. You're back in the system, right where you left off

The lock screen also shows:

• A live clock with the current date
• Your clinic's name and logo
• Trust indicators (Encrypted, Cloud Secured, GDPR Compliant)

Advanced Settings

For fine-tuned control, go to Edit Account Settings and scroll to Kiosk Lock Settings:

• Inactivity Timeout - Seconds of inactivity before the lock screen appears (default: 180 seconds / 3 minutes)
• Max FaceID Failures - Number of biometric failures before PIN is required (default: 3)
• Progressive Lockout Durations - Duration of each lockout stage in seconds after repeated wrong PINs. 5 stages, default: 180s (3 min), 300s (5 min), 900s (15 min), 3600s (1 hour), 86400s (24 hours)
• Send Email at Stage - Which lockout stage triggers an email alert to the clinic owner

How Staff Set Their Own PIN

Each team member should set their own personal PIN:

1. Log in to Dentare
2. Go to your profile settings
3. Set a 4–6 digit PIN
4. Click Save

Until a personal PIN is set, the account's default PIN is used.

Troubleshooting

The lock screen doesn't appear Make sure all three steps are completed: Login PIN enabled, Kiosk Lock enabled, and the current device registered as a kiosk. All three are required.

I forgot my PIN Ask your clinic admin. They can reset PINs or provide the default PIN. If the admin is locked out, contact the Dentare team.

"Account locked" message appears After too many wrong PIN attempts, the account is temporarily locked. Wait for the lockout period to expire (shown on screen), or ask an admin for help.

The lock screen appears too quickly Increase the inactivity timeout in Edit Account Settings under Kiosk Lock Settings. The minimum is 30 seconds.

The lock screen appears on my personal device Your personal device was registered as a kiosk. Go to Account Settings and click "Disable Kiosk Mode" on that device.

Staff members can't unlock Make sure they have either set a personal PIN or know the default PIN. The default PIN can be found in Edit Account Settings under PIN Settings.