Approve employee devices
Employee-role logins must use a whitelisted device. Admins approve or reject phones so a shared password cannot roam freely.
TIM…Selected
Support🇺🇸9+
Payroll
HR · isolated workspace — Back to TiBook
HomeAttendanceLeaveHolidaysRosterDevicesDirectory
24
Staff
2
Pending leave
1
Devices
3
On leave today
Organisation directory
+ Add staffPriya MehtaStore manager · Retail
Arjun ShahCashier · Retail
Neha IyerWarehouse · Ops
2026 © TiBook Made with ❤️ in India
How this looks in TiBook
How to
- 1When an employee signs in from a new phone, TiBook records a pending device and blocks payroll until you decide.
- 2Open Devices in the Payroll workspace.
- 3Review name, email, IP, and user agent. Approve to let them in, or Reject to keep them out.
- 4The employee gets an in-app notice and email either way. Approved devices can punch and open Home.
- 5Remove a lost phone from the list so it cannot sign in again.
Who is gated
Only users whose company role is employee hit the whitelist. Owners, admins, and managers sign in as usual.
Approve the first phone the same day you send the invite, or the joiner will think the login is broken.
Reject unknown cities quickly — the employee will see a clear rejected state.
Related articles
- Employee login and MeStaff sign in with the invite email, land on Home, and use Me for profile, job, documents, ID card, leave, attendance, and team.
- Open the Payroll workspaceEnable Payroll from Apps, then open it from the HR menu. TiBook launches a payroll-only shell so staff and salary stay out of billing.
- Add staff to PayrollAdd name, phone, email, designation, department, Report To, and salary so attendance, leave, and payslips have someone to pay — and optionally create their login.
Need more help?
Email, call, or WhatsApp the TiBook team. We can walk through invoicing, stock, POS, or your GST setup.
Open TiBook