Manage Your Users' Devices

Duration15 minLevelIntermediateOfferOffre de basePrerequisitesLesson 3

Objectives

• I can distinguish between a forgotten phone and a lost, broken, or stolen phone
• I can create a temporary VaultysID with an expiration date
• I can send a replacement VaultysID link
• I can choose between mobile device and browser for new access

0 / 4 objectives achieved — check them off as you go through the lesson.

Why It's Useful

One morning, an accountant from Comptalys arrives without her phone, which she left at home. Karim creates a temporary VaultysID for her valid until the evening: she works normally. The following month, a partner has his phone stolen. Karim sends him a replacement link: as soon as the new phone is linked, the old one is no longer useful.

Without a password, there is no "forgot password." These two actions are equivalent: one is temporary, the other is permanent.

Situation	Action	Effect on the main device
Forgotten phone, temporary failure	Create a temporary VaultysID	None. The temporary access expires on its own.
Lost, broken, stolen, or renewed phone	Replace the VaultysID	It is permanently replaced as soon as the new one is linked.

Your Turn

Do the exercise on your test user, with your second device.

1. Create a temporary VaultysID. In Users, user menu ⋮, choose Create a temporary VaultysID. See A user forgot their phone?
2. Set the expiration. It is 12 hours by default: set it to one hour for the test.
3. Choose the type of device: Mobile device, with a QR code to scan, or Browser, without scanning.
4. Send the invitation and log in with the temporary access from the test user's inbox.
5. Replace the VaultysID. Menu ⋮, Replace the VaultysID, choose the type of device, then Send the replacement link. See A user lost/broke their phone?
6. Complete the procedure on the user side, then check that the old device can no longer connect.

The replacement is permanent

Once the new device is linked, the old one is permanently disabled. Use the temporary VaultysID as long as the user can recover their phone.

Basic Offer

According to the page Pricing and Modules, registering and managing their devices by your users is part of the basic offer. The module Bastion adds central control: access policies by machine and Windows Hello login.

Check Your Knowledge

1A colleague left her phone at home for the day. What do you do?

2What is the default duration of a temporary VaultysID?

3After a VaultysID replacement, when is the old device disabled?

Key Takeaways

• Forgotten: a temporary VaultysID, which expires on its own (12 h by default).
• Lost, broken, stolen: a replacement of VaultysID, permanent once the new device is linked.
• In both cases, the user receives a link via email and chooses mobile or browser.

Next lesson: Pilot: dashboard, configuration, support