Signing in & security

Signing in

Open your brand’s admin URL and enter the username and password an owner created for you. If you don’t have an account yet, an owner or admin adds you under Staff List.

New staff accounts start with your site prefix, for example abangojol_gary - type the whole name. Older accounts keep the name they already had.

Your first login

The first time you sign in with an account an owner created, the panel asks you to set a new password. Choose something only you know — your colleagues and the person who created the account should not be able to guess it. Once it’s saved, that new password is the one you use from then on.

Two-factor authentication (2FA)

For extra protection the panel can require a second step when you log in: a 6-digit code from an authenticator app on your phone (Google Authenticator, Authy, 1Password, and similar all work).

To set it up:

1. When prompted, open your authenticator app and scan the QR code the panel shows. The app adds an entry for your admin account.
2. Type the current 6-digit code from the app back into the panel to confirm the link.
3. From then on, each login asks for the latest code. The code changes every 30 seconds — always use the one showing right now.

Tip

Keep your phone’s clock set to update automatically. Authenticator codes are time-based, and a clock that’s off by more than a minute can make valid codes look wrong.

Staying secure

• Don’t share your account. Each person who needs access should have their own staff account, so the Activity Log shows who did what.
• Sign out on shared computers. Your session stays active for up to an hour of inactivity, and any interaction with the panel resets that clock - opening a new tab does not sign you out. Sign out anyway when you’re on a shared computer, since closing the tab does not end the session on its own.
• Report a lost phone. If you lose the device with your authenticator, ask an owner to reset your 2FA so you can enrol a new one.
• Watch where you log in from. Your brand may restrict the panel to specific office IP addresses — see Whitelist IP. If you can’t reach the panel from a new location, that restriction is likely why.

Next: Finding your way around.