Security

Session management, idle timeouts, biometric lock, and credential security.

Session Management

PropZy uses AWS Cognito for secure authentication. Your session is managed with encrypted tokens that are refreshed automatically while you're active in the app.

Sessions are tied to your device and browser. If you sign in on a new device, your existing sessions remain active. You can sign out of all sessions by logging out from the app.

15-Minute Idle Timeout

For your security, PropZy automatically logs you out after 15 minutes of inactivity on the web. The app tracks mouse movements, keyboard input, touch events, and scrolling to determine whether you're active.

Here's how the timeout works:

• After 13 minutes of inactivity, a warning message appears letting you know your session is about to expire.
• If you interact with the app (move your mouse, press a key, or tap the screen), the timer resets.
• If no activity is detected within the full 15 minutes, you're automatically signed out.
• Any unsaved changes may be lost, so save your work regularly.

Biometric Lock on Android

On Android devices, PropZy supports biometric authentication as an additional security layer. When enabled, the app locks after 30 seconds in the background and requires biometric verification (fingerprint or face recognition) to unlock.

To enable biometric lock:

1. Open Settings → Security in the PropZy app.
2. Toggle Biometric Lock on.
3. Confirm with your fingerprint or face recognition when prompted.

Password and Credentials

Your credentials are encrypted and never stored in plain text. PropZy supports two authentication methods:

• Email and password — your password must be at least 8 characters with a mix of upper and lowercase letters, numbers, and symbols.
• Google OAuth — authentication is handled by Google. No password is stored by PropZy.

For more details on signing up and authentication methods, see the Signing Up page.

What's Next?

Learn about the terms acceptance process:

Terms Acceptance →