Single-session policy
Teachers and students can be signed in on only one device at a time. Parents and admins can use multiple devices.
To keep accounts safe on shared devices like school tablets and computer labs, Keybaki enforces one active session at a time for teacher and student accounts.
What this means for you
- Teachers: signing in on your phone immediately signs out your laptop. The laptop's next click lands on the sign-in page with an amber notice.
- Students: same rule — a tablet you've been using gets signed out the moment your name + PIN is used elsewhere.
- Parents: multi-session is allowed. You can stay signed in on your phone and your laptop.
- Admins: multi-session by default, though specific tiers can be opted into single-session by configuration; admin sessions also expire after 8 hours unless Remember me is ticked.
Idle and end-of-day sign-outs — shared devices only
Ticking "I'm on a shared or public computer" at sign-in adds two extra protections: you're signed out after 20 idle minutes (with a 2-minute warning), and the session ends after a school day (8 hours) regardless.
On your own phone or laptop, leave that toggle off — your session stays signed in for up to 30 days and only ends when you sign out yourself, run Sign out everywhere, or sign in on another device.
What you'll see if you get signed out
If your session was replaced by a new sign-in on another device, the sign-in page shows:
Signed out from another device — Your account was signed in elsewhere. Only one active session is allowed for teachers and students.
You can just sign in again. The new sign-in will then become the active one and any other prior session will be revoked.
Common issues
- I keep being signed out for inactivity. You (or whoever used the device before you) ticked the shared-device option at sign-in. On a personal device, sign out and sign back in with it off.
- My session keeps dropping. Check that nobody else has your sign-in details. If you suspect a stolen PIN, parents can change it from the Family screen; teachers can use Sign out everywhere in Settings → Security and sign in again.
- I want all devices kicked off. Open Settings → Security → Sign out everywhere. Every JWT — including the device you're on — is invalidated.
Related