Executive Summary
PyjamaHR’s security system is designed to protect your account from unauthorized access by detecting logins from multiple devices, locations, or VPNs. While this keeps your data safe, it can also flag legitimate users who work remotely, travel, or use VPNs. This article explains how PyjamaHR’s login security works, how to avoid being flagged, and what to do if your account is suspended due to multi-location or VPN logins.
Detailed Overview
What Is PyjamaHR’s Multi-Location/VPN Login Detection?
PyjamaHR uses SOC-2 compliant security protocols, including active hijacking detection. The system automatically flags accounts when it detects:
- Logins from different devices, browsers, or operating systems
- Logins from different geographic locations (e.g., India and Dubai, or Orlando and Ukraine)
- Logins from IP addresses that change frequently (common with dynamic VPNs)
- Simultaneous logins from multiple places
Why?
This is to prevent account hijacking, credential sharing, and fraud, which have led to scams and fake job postings in the past. The system is automated and not manually triggered by support.
When and Why Does This Matter?
Remote teams: If your team is distributed across cities or countries, or if you travel for work, you may be flagged.
VPN users: If you use a VPN (especially with dynamic IPs), your login may appear to come from different locations.
Multiple devices: Logging in from both a laptop and a desktop, or from both home and office, can trigger the system.
Credential sharing: Sharing one login among several users is not allowed and will almost always result in a flag.
Integration With Other PyjamaHR Features
User Access Types: PyjamaHR supports multiple user roles (Super Admin, Admin, Recruiter, Hiring Manager, External Recruiter, Interviewer). Each user should have their own login.
Security Compliance: These measures are part of PyjamaHR’s SOC-2 compliance and cannot be disabled for individual accounts.
Step-by-Step Guide: How to Avoid Being Flagged for Multi-Location or VPN Logins
1. Do Not Share Credentials
Each user must have their own login. Invite team members via Settings > Team Members.
[Screenshot: Team Members page with “Add Member” button]
2. Limit Device and Location Changes
Use PyjamaHR primarily from one device and one location when possible.
If you must switch devices (e.g., laptop to desktop), log out from one before logging in on another.
3. If Using a VPN
Prefer static IP VPNs: If your company uses a VPN, configure it to use a static IP address.
Avoid dynamic IP VPNs: These can trigger the system by making it look like you’re logging in from different places every time.
[Screenshot: Example VPN settings page showing static IP]
4. Traveling or Working Remotely
Notify your team and support if you’ll be working from a new location for an extended period.
Avoid simultaneous logins from different locations (e.g., you in India, your HR manager in Dubai, both using the same account).
5. Add Users for Multi-Location Access
If you have team members in different locations, add them as separate users with the appropriate access level.
[Screenshot: Inviting a new user with location note]
6. If You’re Flagged
Contact support with your registered email and phone number.
Be ready to verify your identity and explain the login pattern (e.g., “I use both a laptop and desktop,” or “I travel between two offices”).
Support will manually review and restore access if the activity is legitimate.
Advanced Usage & Best Practices
For Companies with Distributed Teams:
Assign each team member their own user account. Do not use shared logins, even for temporary access.
For virtual assistants or remote HR managers in other countries, purchase additional user licenses.
If you must use a VPN, coordinate with IT to use a static IP.
For Frequent Travelers:
Always log out from one device/location before logging in from another.
If you know you’ll be traveling, inform support in advance to minimize disruption.
Credential Hygiene:
Change your password if you suspect your account was accessed from an unknown location.
Never send your password to others, even temporarily.
Account Recovery:
If your account is flagged, provide support with a list of devices and locations you use.
For recurring issues, ask support to register your regular devices/locations.
Troubleshooting & Common Issues
Error Messages & Solutions
“Suspicious activity detected. Your account has been flagged for suspicious activity. For security reasons, access has been temporarily suspended. Please contact support to restore access.”
- Solution: Contact support with your registered email and phone number. Explain your login pattern.
“Account flagged for multiple logins.”
- Solution: Stop sharing credentials. Add users for each team member. Support can restore access after verification.
“I only use my account on my laptop and desktop. Why am I flagged?”
- Solution: Logging in from two devices, especially if not logged out from one, can trigger the system. Always log out from one before logging in on another.
“I use a VPN and keep getting flagged.”
- Solution: Switch to a static IP VPN or avoid using VPNs that change your IP address frequently.
“My account is used by my HR manager in Dubai and me in India.”
- Solution: This is considered account sharing and will be flagged. Add your HR manager as a separate user.
“I travel between cities/countries and get flagged.”
- Solution: Inform support of your travel schedule. Avoid simultaneous logins from different locations.
What If Scenarios
What if my account is flagged during urgent work?
Contact support immediately with your phone number for priority restoration.
What if my team needs to access the account from multiple locations?
Purchase additional user licenses and assign each user their own login.
What if I use both a mobile app and web?
That’s fine if you’re the only user and not logged in simultaneously from both.
Comprehensive FAQ
1. Can I use PyjamaHR on multiple devices?
Yes, but not simultaneously. Always log out from one device before logging in on another.
2. Can I use a VPN with PyjamaHR?
Yes, but use a static IP VPN. Dynamic IP VPNs may trigger security flags.
3. What if I travel for work?
You can use PyjamaHR from different locations, but avoid simultaneous logins and inform support if you travel frequently.
4. Can my HR manager and I share one login?
No. Each user must have their own login. Sharing credentials will result in your account being flagged.
5. How do I add another user?
Go to Settings > Team Members and invite them with their work email.
6. What happens if my account is flagged?
Your account is temporarily suspended. Contact support to restore access.
7. How long does it take to restore access?
Usually within a few hours after verification, but may take longer if additional checks are needed.
8. Can I whitelist my devices or locations?
Not directly, but you can inform support of your regular devices/locations for smoother recovery.
9. What if my account is flagged repeatedly?
Review your login practices, stop sharing credentials, and consider static IP VPNs. Contact support for persistent issues.
10. Can I use PyjamaHR from both home and office?
Yes, but avoid simultaneous logins and always log out from one before logging in from another.
11. What if I use a dynamic IP VPN for security reasons?
Switch to a static IP VPN or avoid using a VPN with frequently changing IPs.
12. Can I get a warning before being flagged?
Currently, the system is automated and flags accounts immediately for suspicious activity.
Related Features & Next Steps
User Access Management:
Learn more about User Access Types in PyjamaHR
Inviting Team Members:
Security & Compliance:
Review SOC-2 Compliance in PyjamaHR
Troubleshooting Login Issues:
Next Steps:
- Audit your current user access and invite all team members as individual users.
- Review your VPN and device usage policies.
- Contact support proactively if you anticipate travel or device changes.
Summary Table: Do’s and Don’ts
Do’s | Don’ts |
Add each user as a separate login | Share credentials among multiple users |
Use static IP VPNs if VPN is required | Use dynamic IP VPNs with frequent IP changes |
Log out from one device before using another | Stay logged in on multiple devices/locations |
Inform support if traveling or changing setup | Ignore repeated flagging or error messages |
Assign correct user access levels | Use one login for multiple team members |
Still have questions?
Contact PyjamaHR support with your registered email and phone number for personalized assistance.
This article is based strictly on real customer conversations and current PyjamaHR platform capabilities as of March 2025. For the latest updates, always refer to the official PyjamaHR Help Center.