Creating your account
Signing up, verifying your email, and what happens on your first login.
What the signup form asks for
| Field | Required | Notes |
|---|---|---|
| Company name | Yes | Your business name |
| Store name | No | Defaults to "<Company> — Main" |
| Your name | Yes | Becomes your staff record |
| Yes | Your sign-in address | |
| Password | Yes | Minimum 8 characters |
| Counter PIN | Yes | Exactly 4 digits. You choose it, so you know it on day one — it is what approves opening the till, refunds and voids |
| Accept terms | Yes | Recorded against your company |
What gets created
Signing up runs as a single transaction, so it either completes fully or leaves nothing behind. It creates:
- Your company, on the Free plan
- Your first store
- A register named
Register 1 - Three payment methods: Cash, Card and EFTPOS
- A product category named
General - Default receipt settings for the store
- Your own staff account, with the admin role
Your company timezone is taken from the browser you sign up in. New accounts start with an empty repair price list — you import your own prices rather than inheriting a sample catalogue.
Email addresses are unique per brand
One email address can hold one account per brand. Signing up again with an address already in use returns "An account with this email already exists".
Choosing a paid plan at signup
Signing up from a paid plan's button still creates the account on the Free plan. The upgrade activates once checkout completes; until then you are on Free with no card required and no time limit.
The welcome email
A welcome email goes to the address you signed up with, containing a link to the app. It carries neither your password nor your PIN — the PIN is the one you chose on the form, and the email shows it only as dots. Nothing you have to keep secret is ever emailed to you.
Your first sign-in asks for a code
Email two-factor is on from the start. After your password is accepted, a six-digit code is emailed to you and the session begins once you enter it. You can trust the browser for 30 days so it stops asking. See Two-factor authentication.
Rate limiting
Signup is limited to 5 attempts per IP address in any 15-minute window.