If your organization is using Salesforce1 app, as admin, you can enable additional security layer when user access Salesforce1 app. Salesforce1 app offer Passcode capability for iOS and Android devices, where user have to enter passcode when open the app or idle for 1 to 30 minutes.
How to setup Passcode?
- Go to Setup | Manage Apps | Connected Apps
- Click Edit link for Salesforce1 for Android and Salesforce1 for iOS
- Look for Mobile Integration and set Require PIN after and Pin Length
Require PIN after specifies how much time can pass while the app is idle before the app locks itself and requires the PIN before continuing. Allowable values are none (no locking), 1, 5, 10, and 30 minutes. This policy is only enforced if a corresponding Pin Length is configured.
Pin Length sets the length of the identification number sent for authentication confirmation. The length can be from 4 to 8 digits, inclusive.