TECHNICAL DOCUMENT

Why We Made the “Off Switch” Deliberately Awkward

This one is an honest note for parents. You may notice that turning off monitoring, or changing your PIN, isn’t a quick one-tap affair in Tortoise Time. That’s not laziness — it’s on purpose. Here’s why.

Some actions mean “breaking your own rule”

Most settings are easy to change — because getting them wrong is no big deal. But a few actions are different. The moment you run them, you’re tearing down the rule you set for your child with your own hands:

  • Turning off monitoring — switch it off, and your child has no limit at all
  • Changing the parent PIN — change it, and the old one stops working
  • Other high-sensitivity actions that make a rule stop applying

We call these “destructive actions.” They shouldn’t be as effortless as nudging the volume or swapping a wallpaper — one slip of a finger and done.

So we put two doors in the way

For every destructive action, we added two doors to make it deliberately slow:

Door one — enter your PIN. Want to turn off monitoring? First prove you’re the parent by typing the PIN only you know.

Door two — confirm once more. Even after the PIN is correct, you’re not done. We pop up one more confirmation: “Are you sure you want to turn off monitoring?” — a half-second pause to ask yourself “do I really want to do this?” And in that dialog, the more prominent default button is Cancel, not “Turn it off.” We want you to think one second longer, not tap straight through out of habit.

Why all this “hassle”

Two very practical reasons:

One — to protect you from your own slip. Late at night, soothing a kid to sleep, hands full — anyone can mis-tap. Two doors make sure something as big as “turning off monitoring” doesn’t happen without you noticing.

Two — to keep kids from sneaking through. Kids are clever. When you unlock your phone to deal with something else, for those few seconds the screen is on and unlocked — and if “turn off monitoring” were one tap, a quick-fingered child could pull it off in that window. But with the PIN door in place, even on an unlocked phone, a child can’t turn it off without the PIN. That door exists precisely to block those few seconds.

One more thing: want to give your child a pass today? Use the front door too

Sometimes you’ll think, “It’s the weekend, let them watch a bit more.” That’s completely fine — but we didn’t leave a back door for it either.

The one front door is: open Tortoise Time → go to Settings → enter your PIN → change the limit. There’s no “unlock just this once” or “make an exception for a few minutes” shortcut. We’ve found that any “just ask and you get more” loophole slowly turns into a child showing up to “ask” every single day at the same time. A rule can be reset by you — it shouldn’t be gone around by a child.

One line for parents

We know “awkward” sounds like a flaw. But when it comes to turning off monitoring, awkward is exactly the bit of peace of mind we built in for you on purpose — gentle, but steady.


Want the full PIN walkthrough → Parent PIN Want to know what each permission does → Permissions Explained

Source public/en/25-guarding-the-off-switch.md

Add Developer WeChat

Scan to connect with me

WeChat QR Code

Please mention "Tortoise Time User" in request