Signing in & security
Signing in with a password and an authenticator code, first-time two-factor setup, trusting a device, and signing out.
The admin portal is protected by two things: your password and a six-digit code from an authenticator app on your phone (this is called two-factor authentication, or MFA). Both are required — a password alone will not get you in.
You need an authenticator app
Before you start, install an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or Authy. It generates a fresh six-digit code every 30 seconds.
Signing in each day
Enter email and password
On the sign-in screen, type your staff email and password.
Enter your authenticator code
You are asked for the current six-digit code from your authenticator app. The box only accepts numbers and focuses automatically.
This browser is remembered
After a successful sign-in, this browser is trusted automatically, so you won't be asked for a code every time on this same browser on this same device. For that reason, only sign in on a private, trusted computer.
First-time setup (enrolling two-factor)
The first time an account signs in — or if the shop requires it and you have not set it up yet — you are asked to enrol:
Add the setup key to your app
The portal shows a setup key (a long code). In your authenticator app choose "add account" → "enter a setup key" and type or paste it in.
Confirm with a code
Enter the six-digit code your app now shows to prove it is linked. Two-factor is then active on your account.
Keep your authenticator safe
If you lose the phone with your authenticator, you may be locked out. Keep a backup where your app allows it, and make sure more than one trusted person can access the shop owner account.
The first owner account
The very first owner account is created once, during setup, by the person who installed the system. After that first sign-in, the owner enrols two-factor as above, and can then run the shop and (where supported) add other staff.
Signing out
Use Sign out in the account menu (bottom of the sidebar / top-right). This ends your session. Always sign out on shared computers.