Why is the App/Terminal not requiring a passcode anymore?

[DaveDS]

[The title of this thread has been edited from the original: How do I prevent unauthorized operation of Terminal?]

I have Terminal set up for general and specific team members. However, on initially powering it up I am able to make transactions without anyone being logged in. This is cured once someone has logged in for the first time. Am I missing a particular setting either in Dashboard or Terminal? Operations of Terminal with nobody logged in leaves me more than a little uncomfortable!

[Alex_ · Accepted solution]

Hey @DaveDS,

Thank you for posting in the community. With the recent revamp to our Team Management system, the passcode options have also changed as well. Before, you had the option of selecting "Always Require Passcode" within the security settings to prompt the passcode screen before and after every transaction. With the rollout of our updated Team Management system, this feature is no longer available.

As you mentioned, you would have to first confirm that your employees select the "log in" option in the top right-hand corner of the screen, and entering their passcode before ringing out a sale. This will then prompt the passcode screen to come up on every new sale as long as you have the proper setting enabled within the app/terminal.

To do so please make sure to go to: Settings > Passcodes (under Security) > After Each Sale (Under Require Passcode). 

Hopefully this helps, let me know if you have any other questions within this thread. 

[DaveDS]

Hey Alex,

Thanks for getting back on this. I hope the engineers will have a serious look at this and figure a way for the Terminal to start at the logon screen, even if the machine is newly switched on or booted up. Making the terminal available for use by anyone without logging on is, in my view, a breach of security. I do not wish to halt the flow at our registration desk by having the machine demand a login at every transaction, but I do need our registrar team members to be obliged to log on to the machine at the start of their session. We are a volunteer organization and that sort of this is easily overlooked.

[tiffanyebenson]

Any idea on if they plan to correct this? literally any person can walk in off the street, ring up a cash transaction, and take all of the money out of the register.  This is a massive security issue.

[Subs-N-Such]

I am having this problem also!  In SETTINGS/PASSCODES/TEAM PASSCODE

This setting repeatedly changes itself back to ON when I (administrator) have logged into device with my passcode and specifically turned off USE TEAM PASSCODE.   WHY WHY WHY would the device/software toggle this back to ENABLE TEAM PASSCODE without any authorization from the administrator (who should have the only access to this setting)?????

For the same reason as previous message sender here, this allows anyone to step up to the device and without requiring any passcode, fake a transaction which opens the drawer and empty the cash!  I CANNOT leave this setting on in my work environment as I share a business space with another business and our employees all intermingle.  HUGE problem!!!!

[AshleyK]

@tiffanyebenson and @Subs-N-Such I hear your frustration and understand how this is an important issue. I just checked with engineering and, yes, this is still an issue they are working on, but hope to have it resolved soon. They are working daily on a fix. 

I will make sure to post in this thread once they announce it's resolution. For now, I have two workarounds that you can use to make your Square Terminal more secure.

• We recommend that you lock your Terminal by logging out immediately after a manual reboot or first thing in the morning after nightly restarts to prevent unwanted access by non-employees or customers.
• We also recommend that for concerned sellers, they review the access of Team Permissions in Square Dashboard and potentially change permissions to be more restrictive.

[AshleyK]

Hey @tiffanybenson this should be resolved now. Can you please let me know if you're still experiencing trouble?

[tiffanyebenson]

@AshleyK  yes! it resolved with the latest update.  That update did delete my entire item grid, but I keep square logged in on a backup tablet that wasn't on wifi, so that one didn't update and I was able to recreate the item grid without issue.  Thank you!

[teasedhairsalon]

I am confused..... I am tryin to get to Passcodes under Security, but when I pull up security there is literally nothing showing, specifically not "passcodes". 

I am wanting to make it easier to track how each employee is doing when it comes to selling our over the counter products in the salon. This way, I know who is selling more, less, who needs to improve, etc. Right now, it is all under me, the administrator, so it is reporting as I am the only one selling anything. 

How can I make it so that before each sale is rang out, they have to enter in their passcode in order to make sure the sale is categorized under their specific name? Is that what the above is answering? If, so, can you explain why I can't see anything in regards to passcodes under the Security tab? 

you can reach me at teasedhairsalonga@gmail.com

[JustinC]

@teasedhairsalon - strange that you're not seeing Passcodes in Settings. Can you check if your app is up to date? 

[Jaythebaker]

I have followed all the steps and have everything set up but still, when logging in, it goes direct and does not require a passcode

[JustinC]

Okay, since Alex's steps didn't work for you, next step is to contact our CS Team so they can look at your settings. 

@Jaythebaker

[icecreamlilys]

I have this same issue but I cannot find "Passcodes" under security.

[JulieP]

some of our devices are requiring passcodes and some are not. Why is this? and how can we enable passcodes on all devices?