Signing In to the App

login authentication token security sign-in logout

How signing in to the IndieBase app works, what to expect when your session expires, and how to sign out or reset the app.

Signing In to the App

The IndieBase app keeps you signed in for a full shift without interruption — but understanding how sign-in works helps when things don't go to plan.

Overview

When you sign in to the IndieBase app, you get a secure access token that's stored on your device. This token is valid for 24 hours, covering a standard shift. It's tied to your device, so signing in on your phone doesn't affect your colleague's tablet session.

The app works fully offline once signed in — your token is stored locally so you can keep working even without a network connection.

How to Sign In

From the App Directly

If you open the app and you're not already signed in (or your session has expired), a Login dialog will appear automatically.

Screenshot: The Login dialog with Email and Password fields and a Sign In button

  1. Enter your Email address.
  2. Enter your Password.
  3. Tap Sign in.

If your credentials are correct, the app loads immediately and you're ready to go.

From the Web Portal

If you've already signed in to the IndieBase web portal and then open the app, you'll be signed in automatically — no need to enter your credentials again. The web portal passes a secure token to the app in the background.

If You Have Two-Factor Authentication Enabled

If your account has two-factor authentication (2FA) turned on, the login process has an extra step.

  1. Enter your email and password as normal, then tap Sign in.
  2. A Two Factor Authentication dialog appears.

Screenshot: The Two Factor Authentication dialog with a six-digit code input

  1. Open your authenticator app and enter the six-digit code shown, then tap Log in.

If you have SMS authentication enabled, tap Send a code via SMS and use the code from the text message instead. You can only request another SMS code after 60 seconds.

If you've lost access to your authenticator app, tap Use a recovery code and enter one of your saved recovery codes.

Token Lifetime - 24 Hours Per Shift

Your sign-in token lasts 24 hours from the moment you sign in. This is intentional - it matches a standard shift length, so you shouldn't need to sign in more than once per shift.

If your shift runs longer than 24 hours, you'll see the login dialog again once your token expires. Just sign in again and carry on — any data you recorded offline won't be lost.

When a token expires, the app detects this as soon as it next tries to contact the server, removes the expired token from your device, and shows the Login dialog.

Signing Out

To sign out, open the navigation menu (the hamburger icon in the top-left corner), then tap Sign Out.

Screenshot: The navigation sidebar with the Sign Out option highlighted

Signing out does the following:

  • Revokes your token on the server immediately, so it can't be reused
  • Removes the token and your user data from this device
  • Returns you to the login dialog

Signing out on one device doesn't affect other devices. If you're signed in on your phone and a tablet, signing out on the phone leaves your tablet session active.

The Reset App Button

The Reset App option in the navigation menu is a last-resort troubleshooting tool. Use it if the app is behaving unexpectedly — for example, showing stale data, failing to sync, or getting stuck on loading.

Screenshot: The Reset App confirmation dialog with a warning message and a Reset App button

Tapping Reset App will:

  • Delete all offline data stored on this device (jobs, patient records, local changes)
  • Clear all cached app files
  • Force a fresh download of the latest app code
  • Sign you out

Important: Any unsynced changes — jobs or patient records recorded offline that haven't yet been sent to the server — will be permanently lost. Only use Reset App if you're confident there's nothing outstanding to sync, or if the app is too broken to sync normally.

After a reset, the app will reload and ask you to sign in again from scratch.

Troubleshooting

The Login dialog won't go away after I enter my details.

Double-check that your email address is correct and that your password hasn't changed recently. If you've had too many failed attempts, you may see a "Too many attempts" message — wait a few minutes and try again.

I keep getting asked to sign in even though I just did.

This usually means your device's clock is significantly out of sync. Check that your phone or tablet has automatic date and time turned on. If the problem persists, try the Reset App option.

The app says I'm offline but I have a connection.

Your sign-in token is stored locally, so you can keep using the app even without a network. However, new data won't sync to the server until the connection is restored. This is normal behaviour.

I signed in on the web portal but the app still shows the login screen.

Navigate directly to the app (usually at your-team-address/app/) from the same browser session you used to sign in. The app picks up your web session automatically when you first load it this way. If you've already opened the app in a separate browser tab or as an installed PWA, sign in using the login dialog instead.

Related Features