SECURITY PROVISIONING

Owner 2FA Configuration

Set up your authorized Owner identity and register your Google Authenticator app. You will be the only person with access to the business dashboard.

🔒 Owner Sole-Authority Rule: These credentials will become the permanent master identity for this deployment. Keep your password safe.

Owner Email Address Master Password (min 8 characters)

Confirm Password

📱 Open Google Authenticator or your 2FA app, tap + and scan the QR code below. If you cannot scan, tap Copy Key to paste it.

---- ---- ---- ----

Account: —

Enter 6-Digit Code From Google Authenticator

Code not matching? Make sure your phone's clock is set to automatic/network time, then try again.

✓ Owner Security Successfully Activated! Google Authenticator 2FA is now permanently enforced. No one can access the backend without both your master password and your live 6-digit phone code.

📧 STEP: Enable Gmail Order Notifications

Tapcard PH NFC can send you real-time Gmail alerts for every new order, payment submission, and customer message. To activate, you need a Gmail App Password — a one-time code Google generates so this app can send emails on your behalf safely.

Go to myaccount.google.com/security
Enable 2-Step Verification if not already on
Search for "App Passwords" in the Google Account search bar
Under App name, type: Tapcard PH NFC
Click Create — Google shows you a 16-character password
Copy it and open .env in your project folder
Set GMAIL_USER=your@gmail.com and GMAIL_PASS=xxxx xxxx xxxx xxxx
Restart Node.js: node server.js

See .env.example in your project folder for a full template.

Proceed to Owner Login → Go to Dashboard →