> For the complete documentation index, see [llms.txt](https://docs.rubica.au/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.rubica.au/households/secure-presentations/sign-in-checks.md).

# Sign-in Checks

The ways a client can prove it's them before a presentation opens, and when to use each.

Every private presentation starts with the client's own email link. Your firm chooses whether they're also asked for something else. Admins set the default in [Sharing settings](/households/secure-presentations/setting-up.md#sign-in-check); advisers can change it on a share unless your firm has turned that off.

| Check                     | What the client does                                                      | Good for                                                                |
| ------------------------- | ------------------------------------------------------------------------- | ----------------------------------------------------------------------- |
| **Email link only**       | Clicks the link in their email.                                           | Low-risk pages, and clients who struggle with extra steps.              |
| **+ Date of birth**       | Clicks the link, then types their date of birth as DDMMYYYY.              | Most client presentations. Nothing to send or wait for.                 |
| **+ Passcode you choose** | Clicks the link, then types a passcode you've told them by phone or text. | People without a date of birth on file, such as a client's accountant.  |
| **+ SMS code**            | Clicks the link, then types a 6-digit code sent to their mobile.          | Sensitive pages. The strongest option.                                  |
| **Anyone with the link**  | Nothing: anyone who has the link can open it.                             | Only when the client asks for it. Your firm can switch this option off. |

## Date of birth

* It's taken from each person's record in the CRM (their birthdate), so **check it before you share**. The share screen shows each date and what the client will type.
* A client types it as day, month, year: 14 March 1961 is **14031961**. The page has separate Day, Month and Year boxes.
* If the date in the CRM is wrong, fix it with **Change** on the share screen. It saves to their record.
* Anyone without a date of birth can't open the presentation until one is added.

## Passcode you choose

* One passcode covers everyone on that share. It must be at least 6 characters.
* It is **never** put in the email. Tell the client by phone or text, separately from the email.
* Nobody can read it back once it's saved, including you. If a client loses it, set a new one.

## SMS code

* The code goes to the mobile in the CRM, or one you type when sharing. The client never chooses the number.
* The page shows only the last digits of the number, so they know which phone to check.

## Wrong tries

After **5 wrong tries** for the same person, that person is locked out for an hour. They see *Too many attempts* and a prompt to ask you for help. The lockout shows in the share's **Activity** so you can see what happened.

## After they're in

A client who has signed in isn't asked again on that device for 7 days.