One user, one passcode. The session stays on this device for a year.