Caller PINs
A PIN is the only real secret in the phone agent. A caller's name and main account number are
not secrets — the number is on your website and the name is in the greeting Jeff just said out loud.
Type the PIN yourself. It is hashed the moment it reaches the server and is never
stored, logged or shown anywhere again — not on this page, not to support, not to me. If it is forgotten,
it gets replaced, not recovered.
When Jeff asks for a PIN
Never
Name plus the main number on the account is enough, from any phone. Easiest for callers.
A stolen phone gets in — both answers are public.
From a phone we don't know recommended
Calling from a number on file? Name and account number is enough. Calling from anywhere else?
A PIN as well. This is the one that answers a stolen phone without making every call harder.
Every time
A PIN on every call from every phone, including your own. Most secure, most friction.
Takes effect on the very next call — no restart.
An account with no active PIN below is never asked for one, so switching this on can't lock anybody out of a
PIN they were never given.
Issue a PIN
No repeated digits and no straight runs — a keypad
plus a guessable PIN is the whole attack. A PIN belongs to a person, so the audit trail can answer
"who authorized that".
PINs in use
| Account | Person | Ext | Can change | Status | Last used | |
|---|
| Loading... |