SECURITY PROVISIONING

Owner 2FA Configuration

Set up your authorized Owner identity and register your Google Authenticator app. You will be the only person with access to the business dashboard.

🔒 Owner Sole-Authority Rule: These credentials will become the permanent master identity for this deployment. Keep your password safe.

Owner Email Address Owner Reset Key (from your server settings) Master Password (min 8 characters)

Confirm Password

📱 Open Google Authenticator or your 2FA app, tap + and scan the QR code below. If you cannot scan, tap Copy Key to paste it.

---- ---- ---- ----

Account: —

Enter 6-Digit Code From Google Authenticator

Code not matching? Make sure your phone's clock is set to automatic/network time, then try again.

✓ Owner Security Successfully Activated! Google Authenticator 2FA is now permanently enforced. No one can access the backend without both your master password and your live 6-digit phone code.

📧 STEP: Enable Gmail Order Notifications

Tapcard PH NFC can send you real-time Gmail alerts for every new order, payment submission, and customer message. To activate, you need a Gmail App Password — a one-time code Google generates so this app can send emails on your behalf safely.

Go to myaccount.google.com/security
Enable 2-Step Verification if not already on
Search for "App Passwords" in the Google Account search bar
Under App name, type: Tapcard PH NFC
Click Create — Google shows you a 16-character password
Copy it and open your backend service on Render → Environment
Add GMAIL_USER (your Gmail), GMAIL_APP_PASSWORD (the 16-character password) and OWNER_NOTIFICATION_EMAIL
Save — Render redeploys automatically

Remember to delete OWNER_RESET_KEY from Render after you finish registering.

Proceed to Owner Login → Go to Dashboard →