Operator access

Sign in

Use the shared operator credentials for this deployment.

Single-operator account — not an email address.

Stored as a server-side hash. Never sent to the browser.

No password reset flow and no self-service recovery: there is one operator account. To rotate credentials, edit dashboard.username and dashboard.password_hash in config/config.php on the server, then sign in again.

This console exposes customer names, emails, phone numbers and shipping addresses. Sessions are short-lived and every report is bound server-side to the mode (LIVE or TEST) the deployment resolves it to.