Security tips

Most problems come from a lost phone, a shared password or a fake payment screenshot. These simple habits protect your shop.

#Protect your account

You sign in to LiteShop with Google or Facebook. Anyone who gets into that account can open your shop.

When to use: today, and whenever you change phones.

1. Use a strong password for your Google or Facebook account.
2. Turn on 2-Step Verification in your Google or Facebook account settings.
3. Add a recovery phone number that only you control.
4. Never share your account. Invite staff with their own account instead. See Invite people.

#Give the right role

Each role opens only some pages. Give each person the lowest role they need.

When to use: when you invite someone, and when their job changes.

1. Make most staff Cashier. Cashiers can't refund, void, change prices or open settings.
2. Make only trusted people Manager.
3. Keep Owner for yourself and a partner.
4. Remove people on the day they leave. See Remove a member.

See Roles for what each role can do.

#Keep PINs private

A passcode shows who made each sale. It only helps if each person keeps their own passcode secret.

When to use: when you add team members or share a register.

1. Give each person their own passcode. Never share one passcode.
2. Use 6 digits, not 4.
3. Don't use easy numbers like 123456 or a birthday.
4. Turn on Lock after each sale or use Lock register when you leave the counter. See Register lock.
5. Change a passcode if someone else saw it.

#Always check QR payments

When a customer pays by QR, LiteShop asks for a photo of their payment screen. LiteShop reads the photo and shows a hint, like Looks fine or Warning – check carefully. The hint is not proof.

When to use: every time a customer pays by QR, in the shop or online.

1. Take the photo of the customer's payment screen.
2. Open your own banking app on your own phone.
3. Find the new payment and check the amount and the name.
4. Only then tick I checked this payment in our banking app.
5. Finish the sale.

More help: QR photo check.

#Fake payment screenshots

Some people send an edited or old screenshot instead of paying. LiteShop checks online payment photos and blocks clear fakes, such as a wrong amount or a transaction used before.

When to use: for orders from your online store and payment links.

1. If a photo fails the check, the customer must upload another one.
2. After 3 failed photos, the order is cancelled automatically.
3. Owners and managers see these in Alerts.
4. Still check every payment in your banking app before you tap Payment received.

More help: Fake screenshot guard and Fake payment alerts.

#Lost or shared devices

A shop phone or PC stays signed in. Anyone who picks it up can use LiteShop.

When to use: when a device is lost, stolen, sold or used by many people.

1. Lock the phone or PC with a screen lock.
2. On shared registers, turn on Require team passcode in Team > This device.
3. If a device is lost, change your Google or Facebook password right away. Then sign out of all devices in your Google account security page.
4. If a staff member's own phone is lost, remove them in Settings > Team and invite them again later.
5. Before you sell or give away a device, sign out of LiteShop.

#Sign out

Sign out when you stop using a device, or when someone else will use it with their own account.

When to use: on a borrowed device, a device you give away, or a public computer.

1. Tap your initials (the account menu).
2. Tap Sync status and check that nothing is waiting to sync.
3. Open the account menu again.
4. Tap Sign out.