Trusted devices (returning guests)
Remember a verified guest's device for a set number of days so they reconnect with one tap on "Continue"; review and revoke records in the panel.
When a guest signs in with a method that proves identity (SMS code, Turkish ID, Google, Facebook, username and password), their device is remembered for the number of days you set on the hotspot. When the same device comes back, the login page shows a "Welcome back" section with a Continue button. No new SMS is sent; every login still creates a fresh one-time RADIUS credential and writes a Law 5651 record.
Which logins are remembered
| Method | Remembered | Why |
|---|---|---|
| SMS code, Turkish ID, Google, Facebook | Yes | The guest proves identity |
| Username and password | Yes | Changing the password in the panel revokes all of that account's devices |
| Voucher, PMS (room number), click-through | No | Code validity, check-out and daily limits are re-checked on every login |
Continue is refused when the account is blocked or expired, the device limit is reached or the method is no longer enabled in the published design; the guest falls back to the normal login.
Turn it on
- Open the hotspot on the Hotspots page and press Design Login Page.
- On the Behavior tab find Remember device.
- Enter 0–90 in Remember for (days). The default is 30 days; 0 turns the feature off.
- Choose Login on a remembered device: One tap waits for the guest to press the button, Automatic starts the login by itself when no consent is needed.
- Publish the design. The setting reaches guests only after publishing.
The period counts from the guest's first verification; Continue does not extend it. If you shorten it (for example from 30 to 7 days), older records stop working immediately.
Loop protection in automatic mode
If the router rejects the login, or the same device logged in during the last 2 minutes, the page does not start the login by itself; the guest presses the button. A RADIUS outage cannot cause an endless retry loop.
Review and revoke records
The Remembered devices tab on the hotspot detail page lists the remembered devices: Device (MAC) (masked), Verification method, Verified, Last login, Valid until and Status.
- By default only Active records are shown. Show revoked and expired also lists revoked and expired ones.
- Use Revoke for one device or Revoke all for all of them. A revoked device signs in normally next time. Every revocation is written to the audit log.
When the legal texts change
If you republish the privacy notice or terms of use, Continue still appears but the guest must tick the consent boxes before connecting. The new consent is stored in the KVKK consent records. Details: Consent records.
Limits
- MAC randomisation: if iOS or Android uses a fixed "private address" per network the device is recognised; if the address changes on every connection it is not, and the guest signs in normally.
- MAC spoofing: someone who knows a MAC address could use another guest's record on the same hotspot. Records are tied to one hotspot, expire and can be revoked. Set the period to 0 at risky venues.
- The identity proof is not renewed until the period ends (even if a phone number changes hands).
Security and KVKK
- MAC addresses are not stored in plain text: a keyed hash is stored and the panel shows a masked value only.
- Expired or revoked records are deleted after 7 days; records of deleted guest accounts are deleted immediately.
- Device remembering processes personal data; mention this purpose in your privacy notice.