Every staff account now requires an authenticator app in addition to a password.
A member of staff without one is taken to set it up before they can reach
anything in the back office.
The reason is plain: that back office holds the member registry, the dues ledger
and the payment history, and a stolen password should not be enough to open any
of it. Recovery codes are issued at setup, so a lost phone does not lock the
association out of its own records.
Every change staff make to a member record, an application, an invoice or a
payment is now recorded — who made it, when, and what changed.
← All news
A member of staff without one is taken to set it up before they can reach
anything in the back office.
The reason is plain: that back office holds the member registry, the dues ledger
and the payment history, and a stolen password should not be enough to open any
of it. Recovery codes are issued at setup, so a lost phone does not lock the
association out of its own records.
Every change staff make to a member record, an application, an invoice or a
payment is now recorded — who made it, when, and what changed.