PIN & sharing

Luma lives on your home network, so its security question is a household one: do you want everyone on the Wi-Fi to be able to change things, or only people who know a code?

Without a PIN

Skip the PIN at setup and your Luma is open to your network: anyone in the household can open its page and add, edit, or dismiss reminders. For a family device in the kitchen, that’s usually exactly right — share the address and everyone’s in.

With a PIN

Set a PIN (four characters minimum — the app suggests 4–8 digits) and the device’s pages and settings ask for it. Signing in lasts 24 hours per browser, and the device keeps at most eight signed-in sessions, quietly dropping the oldest.

• The PIN gates the dashboard and every setting: reminders, modes, timezone, brightness, device management, and updates.
• Five wrong attempts in a row lock PIN entry for 30 seconds — and the clock only resets on a correct entry, so guessing stays slow.
• The PIN is never stored readably on the device — only a salted fingerprint of it.
• The companion app pairs once (it asks for the PIN then) and holds a per-system key afterwards, so you aren’t retyping the code on your own phone.
• A PIN also locks re-setup: with one set, nobody can re-run pairing on your device without the PIN or your app’s stored key. Five wrong attempts there lock re-setup until the device is power-cycled — and your own app, holding the key, is never locked out.

Sharing patterns that work

• The family board: no PIN, sitting in a shared room. Colour-code chores per person and let anyone tap things done.
• Yours alone: PIN set, and the address kept to yourself. Others see the glow; only you change what it means.
• Mixed: PIN set but shared with the household — everyone can edit, and the lockout still keeps guests out.

Forgotten the PIN? There’s no back door — that’s a feature. Recover the device with a factory reset and set it up fresh; your reminders are quick to recreate, and nothing about them ever left the device.