PBJ CRM 7.66 — passkeys instead of passwords, the PBJ CRM phone app and notifications on every licensed site

PBJ CRM 7.66 is out — a free update for everyone who owns PBJ CRM 7.x. It carries every change since 7.56 (7.57 to 7.66). It adds one database table (DB 31 to 32, for the phones signed in to the app), so take a backup before you update, as always. No add-on module needs updating for it.

Sign in with a passkey, not a password (7.63)

• The CRM sign-in page leads with Sign in with a passkey: Face ID, Touch ID or a fingerprint. My settings has a Passkeys card to add one on each phone or computer and remove one you no longer have.
• The other way in is an emailed link that works once, for 15 minutes. Invites and people added by a manager get a sign-in link instead of choosing a password. wp-admin’s own login page is unchanged.
• One sign-in for everybody: Help Desk clients use the same page and land in their own portal; staff land in the CRM.
• Each device stays signed in until 3 days of not using it, so an app you use daily stays signed in and a device left alone signs itself out. The Remember me box is gone.

The PBJ CRM phone app (7.64 to 7.66)

• The app signs in with the site’s own sign-in page and never sees a password. Every call it makes is signed by a key kept in the phone’s secure chip, so a copied sign-in is useless on another device.
• Your records reach the phone through the same access rules as the CRM itself, and Vault entries are never kept on a phone. Agenda, Inbox, Create and every record open the site’s own screens inside the app, already signed in.
• Notifications on the phone: each person chooses what notifies them. On sites other than pbj.tech, each notification travels through pbj.tech as a sealed envelope with no names, text or record details; pbj.tech checks the site’s PBJ CRM licence, then the phone fetches the details from your own site.
• Phones signed in on My settings lists every phone signed in, with Sign out for a lost one; the App push page keeps a log of app sign-ins, sign-outs and blocked attempts (no IP addresses, no tokens).

Also in this update (7.57 to 7.62)

• Every timeline row opens: notes, emails, imports and campaign sends open a read-only reader with the full text and its attachment, and the row names the attachment’s real type.
• PDFs preview in the file viewer again.
• On a phone, the email reply box no longer grows over the record’s header, the text-message composer’s buttons stay inside it, and an open More sheet stays open.
• An Inbox email’s sender address opens the CRM composer again; long web addresses and device ids stay inside their column; a refused Save is said once.
• For module authors: modules can add a card to a profile’s side rail and put a screen under the Manager tab.

Upgrading

Update from Plugins in your WordPress dashboard once your licence key is saved in PBJ CRM’s settings. Every change is listed on the PBJ CRM changelog.

New to the suite? See every plugin on the WordPress Plugins page.