Biometric sign-in and the app-open lock
In the QuoteHive mobile apps you can sign in with your device’s fingerprint or face instead of typing a password every time, and you can add a lock that closes the app behind you whenever you put it down.
What biometric sign-in actually is
It is a local convenience on one device, not a second account credential. Your session is sealed by the phone’s own security hardware — the Android keystore, or the iOS keychain — and released only when the device’s sensor recognises a live fingerprint or face. QuoteHive never sees or stores your fingerprint or face; the operating system does the matching and only tells the app yes or no.
Because it is a local convenience, it does not replace two-factor authentication or a passkey. Those are still required before you post a job, unlock a job’s documents or place a bid. If you want fingerprint or face sign-in that works everywhere, including the website, that is a passkey.
Turning it on
- Open the app and go to Security in your account menu.
- Turn on Biometric sign-in and confirm with your fingerprint, face or device PIN.
- Optionally turn on the app-open lock as well — see below.
The button appears whenever your device has the hardware, not only once you have enrolled a fingerprint or face. If your device can do it but nothing is enrolled yet, the option is dimmed and tells you exactly what to set up in your phone’s own settings first.
The app-open lock
This is a separate, opt-in toggle. With it on, the app re-locks every time it returns to the foreground, so a glance at your phone on a job site does not expose your bids, messages or client details. It locks on the way out to the background rather than on the way back in, so protected content is never briefly visible while the prompt appears. The lock screen always offers Sign out instead, so a wet finger or a failing sensor can never trap you inside a locked app.
When the saved sign-in is cleared — and why
- You add or remove a fingerprint or face on the device. The saved sign-in is invalidated and you sign in with your password once. This is deliberate: without it, someone holding your unlocked phone could enrol their own face and walk into your account.
- You sign out. The sealed session is dropped, so the next person to pick up a shared phone cannot unlock straight back into the account that just signed out.
- You reset your password or sign out of all devices from the web. The server-side session is revoked, and the app clears its sealed copy the next time you use it rather than leaving a dead shortcut in place.
Good to know
- The sealed session stays on that one device. It is never synced to a cloud account and never restored onto a different phone from a backup.
- Turning biometric sign-in off does not sign you out — it just goes back to asking for your password.
- Every app sign-in still appears in your active sessions list under Account → Security on the website, and you can revoke any of them from there.
Lost the device entirely? Sign in on the website, go to Account → Security and revoke that session — the sealed copy on the phone stops working immediately. See Two-factor authentication, passkeys and sessions and The QuoteHive mobile apps.