One account sits above the rest: it creates the others, decides what they can do, and is the one worth protecting properly.
The owner account is not simply the first login. It is the one that adds staff, defines roles, changes settings and locks periods — which makes it the single point that everything else in the security story depends on.
Two habits follow from that. It should not be the account the counter uses daily, because a shared owner login makes roles meaningless. And the number it is registered to should be current, since that is what sign-in and recovery rely on.
The counter gets its own login, not this one.
Sign-in and recovery depend on it.
With roles that fit their jobs.
New sign-ins are worth noticing.
Who can open the books, on which device, and what they are allowed to do once inside. Staff get accounts of their own rather than a shared password, and what each of them can reach is set screen by screen.
Most of it is set up once, early, and then only noticed when something changes — a new device signs in, a bill is cancelled, a role needs tightening.
per year
From Growth
Everything it governs.
No. Shared, it makes roles unenforceable and the audit log anonymous — the two things that protect you.
Create staff logins, define roles, change settings and lock closed periods.
Keep the registered number current — sign-in and recovery both depend on it.
Everything else in the security story assumes this one is not shared.
