The Mobile-Based Access section allows administrators to configure how users interact with access points using their mobile devices. These settings control the availability and behavior of mobile credentials across the organization, enabling secure and flexible access management. 

Administrators can configure different mobile access methods, authentication options, and device-level security controls based on organizational requirements.

Default Settings

Tap to Access

The Tap to Access feature allows users to unlock doors by tapping their mobile device on the reader, similar to using a physical access card.  When enabled:

• Users can be assigned permission to use Tap to Access.
• First-time users are required to calibrate their phone with the nearest device before using the feature
• After successful calibration, users can seamlessly gain access by tapping their phone on the reader for fast, secure, and contactless entry.

Click to Access

The Click to Access feature allows users to unlock doors directly through the mobile application without physically tapping their device on the reader. When this feature is enabled, users can open the app and select the door they are authorized to access.

Administrators can configure the operational access range for Click to Access, which can extend up to approximately 20–30 meters. The selected range determines the maximum distance from which users can trigger door access through the application.

Access Range Levels

• Level 1 – Close Proximity
  Access works only when the user is very close to the door.
• Level 2 – Near Range
  Allows access from a moderate distance.
• Level 3 – Far Range
  Enables access from the maximum supported distance.

Note: First save these settings (click Save changes). 

Once saved, administrators can use the Push to All Users option to apply the same settings across the organization.

Note: Access range settings can also be configured individually for specific users depending on operational requirements. 

Multifactor Authentication (MFA) 

The Multifactor Authentication (MFA) setting adds an extra layer of security for mobile-based door access. When enabled, users are required to complete an additional verification step before access is granted through the mobile application. 

Administrators can configure and specify the doors on which MFA should be enforced. 
This can be configured directly from the Access Point Details page by enabling MFA for the required doors or barriers.

Whenever a user attempts mobile access on these doors, the application will prompt them to verify their identity using the authentication methods available on their mobile device, such as:

• Fingerprint authentication
• Face ID
• Device PIN or unlock pattern

This additional verification helps strengthen security and prevents unauthorized access, even if a user’s mobile device is compromised. 

Important:

When Mobile MFA is enabled:

• Tap to Access will be disabled
• NFC/Fingerprint authentication on the door device will not function
• Only Click to Access through the Spintly mobile application can be used for entry

Remote Unlock

The Remote Unlock feature allows authorized users to unlock doors remotely through the mobile application, regardless of their physical location. By default, remote access is disabled for all users to maintain security. Administrators can enable this feature for specific users whenever remote access is required.

When the Enable Remote Access option is turned on: 

• Administrators can individually grant remote access permissions to selected users.
• Authorized users can unlock assigned doors or barriers remotely from anywhere in the world using the mobile application.

This feature is especially useful for remote operations, visitor management, emergency access, or granting temporary access when users are not physically present at the location.

Lock to Single Device

The Lock to Single Device setting helps enhance account and access security by restricting users from signing into the Spintly mobile application on multiple devices. 

When this option is enabled:

• Users can access the application only from their registered mobile device.
• Any attempt to sign in from another device will require administrative awareness or approval.

This feature helps prevent unauthorized account sharing and ensures that mobile access credentials remain securely linked to a single trusted device.