Signing in
Why there is no password, how the magic link works, and what to do if you lose your phone.
There is no password. This page explains what replaces it and why.
How it works
Send LOGIN to your shop's number
From the owner phone. Any other number gets no response to that word.
Tap the link that comes back
It is valid for 15 minutes and works exactly once.
You are in
A session lasts 30 days on that device.
Why no password
Your WhatsApp number is the identity. It is verified by the fact that only your phone received the link — the same property a one-time SMS code relies on, without an extra channel to lose or a password to reuse from another site.
It also removes the whole category of problems that comes with passwords: reset flows, a shared shop password nobody changes when staff leave, and a credential that works from anywhere in the world the moment it leaks.
Single use, genuinely
Each link burns on use. Opening it twice at the same instant — a link preview followed by a real tap — can only succeed once, and it is the first one that wins.
A failed login always needs a fresh LOGIN. There is no way to retry an old
link, and that is the point.
Rate limits
LOGIN is limited to three per hour. That covers a genuinely lost link and
stops a flood of live credentials being sent to a phone that may not be in
your hand.
If you lose your phone
The number is the identity, so recovering the number recovers the account. Get
the SIM replaced by your carrier, put it in a new handset, and send LOGIN.
If you need every existing session ended immediately — a stolen handset that is still unlocked — contact us. Rotating the session key signs every device out at once, everywhere, and it is the documented way to handle a compromise.
Add it to your home screen
The dashboard installs as an app. Open it in the phone's browser and choose "Add to Home Screen". It gets its own icon, opens without browser chrome, and keeps its session.
What a session can and cannot do
A session is tied to your shop. Every screen and every query is scoped to it, and there is no URL you can edit to see another shop's data — the shop is taken from the verified session, never from the address bar.
If a shop is suspended, its sessions stop working immediately rather than running out their 30 days.