Security & Permissions — Lock It Down

Three layers of authentication, matter-level passwords, 50 permission flags, and a complete audit trail. Enterprise security for solo and small firms.

12 min Essential

Client confidentiality isn't optional. TimeNet Law 6 gives you enterprise-grade security without the enterprise-grade headache — three authentication layers, matter-level passwords, granular permissions, and a complete audit trail. All on the iOS app and synced with your Mac.

🎬

DEMO VIDEO: "Three Layers in 10 Seconds" — Launch app → Face ID unlocks → navigate to locked matter → enter matter password → access granted. Smooth, fast, and secure.

Short looping video — record this weekend

Three-Layer Authentication

TimeNet Law protects your data at three independent levels. Each can be enabled or disabled separately — use one, two, or all three depending on your security needs.

1

Database Password

  • Protects the entire database file
  • Required every time you open the app
  • Set this in Settings → Security → Database Lock
  • Same password works on Mac and iOS (it's in the database itself)
📸

Screenshot: Database password prompt on app launch

2

Control Center Login

  • Timekeeper-level authentication
  • Each timekeeper has their own login credentials
  • Controls which data a timekeeper can see and edit (via permission flags)
  • Set this up on your Mac in the Control Center
📸

Screenshot: Control Center login prompt (select timekeeper + enter password)

3

Face ID / Touch ID

  • Standalone biometric lock on the iOS app
  • Fastest authentication method — just look at your phone
  • Enable in Settings → Security → Face ID Lock
  • Can be used alone or in addition to the other layers
📸

Screenshot: Face ID prompt on iPhone

🎬

DEMO VIDEO: Face ID unlock — pick up phone → Face ID scans → instant access. Beautiful.

Short looping video — record this weekend

Background Re-Authentication

All three layers re-lock automatically when the app goes to background:

  • Switch to another app → come back → re-authenticate
  • Lock your phone → unlock → re-authenticate
  • This prevents someone from picking up your unlocked phone and accessing client data
  • Automatic, no configuration needed
Pro Tip

Face ID makes re-authentication nearly invisible. Enable it and you won't even notice the re-lock — your face unlocks it instantly when you return.

Matter-Level Passwords

Some matters are extra sensitive — opposing counsel's files, high-profile clients, personal matters. TimeNet Law lets you lock them individually.

  • Set a password on any individual matter
  • Anyone trying to view that matter's entries must enter the password first
  • Password is per-session — enter once, access until the app backgrounds
  • The + button is hidden on locked matters (no sneaking past the lock screen!)
  • Set matter passwords on your Mac in matter settings
📸

Screenshot: Matter password entry screen

📸

Screenshot: Locked matter showing password required prompt (no + button visible)

Permission Flags — 50 Levels of Control

The Control Center on your Mac lets you set fine-grained permissions for each timekeeper. 50 individual flags give you precise control without complexity.

Categories of Permissions

  • Client/Matter access: Which clients and matters a timekeeper can see (including NA = No Access, RO = Read Only)
  • Entry permissions: Can they create, edit, delete entries? Only their own, or everyone's?
  • Billing permissions: Can they view rates? Create invoices? See trust balances?
  • Admin permissions: Can they change settings? Manage other timekeepers?
  • Report access: Which reports can they run?

Most firms only need to set a few — the defaults are sensible.

📸

Screenshot: Permission flags interface on Mac (Control Center)

Pro Tip

For a solo practitioner, you may never touch permissions. They're there when you grow your team and need to control who sees what.

Audit Trail

Every significant action is logged:

  • Entry created, edited, deleted
  • Invoice generated
  • Payment recorded
  • Matter accessed
  • Who did it, when, from which device

The audit trail is your proof of data integrity. If a client ever questions when an entry was made or modified, you have the receipts.

📸

Screenshot: Audit log showing recent actions with timestamps and actors

Security Best Practices

Solo Practitioner

Enable Face ID + Database Password. That's two layers that take zero extra time with biometrics.

Small Firm (2–5 Timekeepers)

Add Control Center logins so each person sees only their data. Set matter passwords for sensitive cases.

Growing Firm

Use the full permission system. Restrict billing access to partners, limit associates to their own entries, lock down administrative functions.

All Firms

The audit trail runs automatically. You don't need to enable anything — it's always on.

Setting It All Up

Here's the recommended configuration, step by step:

1

Set the database password

On Mac: Go to Control Center → set a database password. This is the first line of defense for your entire database.

2

Create timekeeper logins

On Mac: Create timekeeper logins with appropriate permission flags. Each person gets their own credentials and sees only what you allow.

3

Enable Face ID

On iPhone/iPad: Go to Settings → Security → Enable Face ID Lock. This makes re-authentication invisible.

4

Lock sensitive matters

On Mac: Set matter passwords on sensitive matters as needed. Only those who know the password can access them.

5

Test your configuration

Close the app, reopen, and verify each layer prompts correctly. Switch apps to test background re-authentication. Try accessing a locked matter.

📸

Screenshot: Settings → Security section showing all toggle options

Security shouldn't slow you down. TimeNet Law's three-layer approach means you can use Face ID for instant access in trusted environments, or stack all three layers for maximum protection. The audit trail runs silently in the background. Your clients' data is safe, your bar obligations are met, and you barely notice it's there.

Related Tutorials

Security Questions? Perry's Got You.

Need help configuring permissions or troubleshooting authentication? The person who built this security system will walk you through it.

Get Help →