Skip to content

How to Protect Sensitive Actions with an Admin PIN

4 min readUpdated

Quick answer

Each admin or manager sets a 4-digit PIN: click your avatar, choose Profile, open Admin PIN, type a PIN and click Set PIN. Then an admin opens More → Settings, ticks Require PIN for sensitive actions under Security and clicks Save. SupaDay then asks for a PIN before turn tracker changes, Transactions and Commissions.

Open in SupaDay

If your front desk computer or tablet is shared, an admin PIN stops anyone from reshuffling the turn rotation, opening your sales history or changing commission rates without a manager's OK. Each manager and admin has their own 4-digit PIN, and any one of them can approve the action.

Set your PIN

Do this first, before you turn the requirement on. Admins and managers can set a PIN. Providers don't see this option.

  1. Click your avatar at the top right and choose Profile. On a phone, tap More, then Profile.
  2. Open the Admin PIN section. It says No PIN set if you don't have one yet.
  3. Type 4 digits in PIN.
  4. Click Set PIN.

You'll see PIN saved. and the status changes to PIN is set. Ask every manager who runs the front desk to set their own PIN the same way.

Heads up: If you turn on the requirement before anyone on the team has a PIN, nobody can get past the PIN prompt. Set at least one PIN first.

Turn on the PIN requirement

Only admins can do this.

  1. Open the More menu and click Settings.
  2. Scroll to Security.
  3. Tick Require PIN for sensitive actions.
  4. Click Save in that section.

The PIN rule is set for each location separately, and so are PINs. If you run more than one location, set it up in each.

What the PIN protects

With the requirement on, SupaDay asks for a PIN before these actions:

Area What needs a PIN
Turn tracker Reordering the rotation, clocking staff out, undoing a turn, resetting the rotation and changing turn tracker settings.
Transactions Opening the Transactions page to view or manage past sales.
Commissions Opening the Commissions report and Commission Settings.

Everything else works as usual. Giving a turn, checking clients in and checking out don't need a PIN.

Approve an action with your PIN

When someone tries a protected action, an Enter PIN box appears with the message A manager or admin PIN is required to perform this action.

  1. Tap your 4 digits on the keypad.
  2. SupaDay checks the PIN and carries on with the action.

Any active admin's or manager's PIN on the team works. After a correct PIN, SupaDay remembers it for 5 minutes, so you can make a few changes in a row without typing it again. Reloading the page asks for it again.

If you tap Cancel on a protected page like Transactions, SupaDay takes you back out of that page.

Change or remove your PIN

  1. Go to your Profile and open Admin PIN.
  2. Type your Current PIN.
  3. To change it, type the New PIN and click Change PIN. To turn it off, click Remove PIN.

Forgot your current PIN? Click Forgot PIN? and type your Account Password instead. Click Use PIN instead to switch back.

FAQ

Frequently asked questions

Can staff without manager rights approve a PIN prompt?

No. Only admins and managers can set a PIN, so only they can approve protected actions. Providers don't see the Admin PIN section in their profile.

Does each manager need their own PIN?

Each admin and manager sets their own, and any one of them works at the prompt. That way you're not sharing one code across the whole team.

How long does SupaDay remember the PIN?

For 5 minutes after a correct PIN, in that browser window. Reloading the page or using SupaDay on another device asks for it again.

I forgot my PIN. How do I reset it?

Go to Profile, open Admin PIN, click Forgot PIN? and enter your account password. Then type a new PIN and click Change PIN.

What happens if someone types the wrong PIN?

The box shows Invalid PIN. and clears so they can try again. After several wrong tries in a minute, SupaDay makes them wait a moment before trying again.

Still stuck?

Email us and a real person will reply, usually the same day.

[email protected]