Sharing a Skomi Dashboard Without Asking for a Login

A shared dashboard is a link to one site's numbers for somebody who has no Skomi account: an investor, a client, the rest of the team.

Creating one

Only the site's owner can create a link. Give it a name you will recognise later, such as "Board deck" or "Client: Acme", because that name is also the heading the reader sees.

You get a URL of the form /d/ followed by an unguessable token. You can keep up to twenty links per site, which is enough to give each audience its own and revoke them separately.

What the reader gets

The site's aggregate numbers, read-only. No account, no sign-up, and no JavaScript. The page is rendered on the server, so it works with scripts disabled and loads on a bad connection.

The token carries no authority beyond reading that one site's totals. It cannot change a setting, cannot see other sites, and cannot see anything about individual visitors.

Time zones

The link remembers the zone of whoever created it, rather than defaulting to UTC.

That is worth knowing because a period means different days in different places. A page built in UTC would quietly disagree with the dashboard it was shared from: the same number, off by a day, with no way for either party to tell which was right.

Passwords

A link can have a password, minimum six characters. Below that it is theatre rather than protection.

Without one, the link's security is that the token is unguessable. That is genuinely enough for most uses and it is not enough for all of them: anyone the link is forwarded to has the same access as the person you sent it to. Put a password on anything you would mind being forwarded.

Revoking

Delete the link and it stops working immediately. Anyone still holding the URL gets nothing.

Because the token has to be re-copyable, since a share link is a bookmark you resend next month, it is stored as-is rather than hashed. So treat the list of links as you would any list of secrets, and revoke rather than reuse when somebody leaves.

Or add them to the account

If the person needs their own sign-in, will come back regularly, and should be removable individually, a member is the better answer. See giving someone access.