Applies to: All
Note: PIN-enabled devices & PIN code login is launching on June 23rd, 2026. Until then, the legacy PIN experience is active. Learn more here.
PIN-enabled devices are shared retail devices — like a store iPad, tablet, or back-of-house desktop — that an admin or manager has registered for fast, PIN-based login. Once a device is registered, anyone with a PIN code on your team can sign in and out with just six digits, without needing a manager to be the "primary" account.
Why use PIN-enabled devices?
PIN-enabled devices replace an older model that required a manager to be actively signed in on a shared device before any associate could use their PIN. When that manager session timed out — after 10 minutes of inactivity — every associate at the store lost access until the manager physically came back to sign in again. PIN-enabled devices remove that dependency entirely by trusting the device itself.
For associates: Sign in with your PIN on shared devices the moment you need to — no waiting for a manager to be available or signed in. The retail floor stops depending on one person's session.
For store managers: Manage staff access remotely without needing to be physically present at every location. Get your team up and running on a new device from anywhere by sharing an activation code, instead of flying or driving to set it up in person.
For brand admins: Set up and manage PIN authentication at scale — across 5 stores or 100 — with a single, brand-level view of every registered device. See exactly which devices are trusted, disable a lost or retired device with one action, and onboard new stores faster.
For everyone: Reliable, secure authentication on shared devices, with sensible defaults — accounts are automatically signed out after 10 minutes of inactivity, devices can be revoked if lost, and PIN logins on a trusted device skip MFA so the retail floor stays fast.
Overview
A PIN-enabled device is a specific device (computer, tablet, or phone) that's been explicitly registered with Endear.
On a registered device, any user on your team with a PIN can log in directly — no manager-primary-account required.
Admins and managers register devices. Users use them.
PIN-enabled devices require the Enterprise Security add-on.
A device can be registered in two ways: by registering the device you're physically using, or by using an activation code to register a device remotely.
How PIN-enabled devices work
When a device is registered as PIN-enabled, Endear marks that device as trusted for PIN logins. After that:
The login screen on that device defaults to an account picker showing recently signed-in users and a PIN entry field.
Any team member with a PIN can sign in independently.
Users are automatically signed out after 10 minutes of inactivity — and returned to the account picker, ready for the next person.
Logins via PIN on a registered device do not require multi-factor authentication.
This is different from the way PIN login used to work: previously, a manager had to be signed in as the "primary" account on a shared device before PIN users could log in. With PIN-enabled devices, that step goes away. The trust is granted to the device itself.
Who can do what
Role | What they can do |
Admin | Register devices, generate activation codes, manage and revoke devices, view all devices |
Manager | Register devices, generate activation codes, view and manage devices on their teams |
User | Log in with their PIN on a registered device |
Requirements
Your brand must have the Enterprise Security add-on enabled.
A device must be registered (either directly by an admin/manager on site or via an activation code by anyone on the team) before users can sign in with their PIN on it.
Still Need Help?
We are happy to assist you for more 1:1 direction. Reach out to our live chat!