PINs, auto-lock, and account security

TiedUp supports several layers of privacy protection so your data stays visible only to you on shared or physically accessible devices.

PIN lock

PIN lock adds a 4-digit access code that is required each time you open or resume the app. The PIN hash is stored locally on your device using the Web Crypto API — it is never sent to our servers.

1. 1

   Enable PIN lock

   Go to Settings → PIN lock → toggle on. You'll be prompted to create a 4-digit PIN.

2. 2

   Set auto-lock

   Optionally enable "Auto-lock after inactivity" and choose a delay (1, 5, 15, or 30 minutes).

3. 3

   Changing PIN

   Enter your current PIN, then set a new one. Changes take effect immediately.

4. 4

   Disabling PIN

   Verify your current PIN first. The lock is then removed from this device.

Auto-lock

Auto-lock requires PIN lock to be enabled. It automatically locks the app after a period of inactivity. This is device-local and works even if the app tab remains open in the background.

Password

Your account password is hashed with Argon2id before storage and never exposed in plaintext. To change your password, use the forgot password flow from the login page.

Sessions

Each login creates a server session stored in a secure, HttpOnly cookie. Sessions expire automatically and cannot be read by client-side JavaScript.

Deleting your account

Account deletion is available from Settings → scroll to the bottom. This permanently removes your account, all rules, entries, check-ins, and partner data. This action cannot be undone.