One short setup. After this, only people with the code in Google Authenticator can save changes to your menu on the server.
data/tvm-save-secret.txt or data/.tvm-save-secret),
have that password ready to paste below. If you never set one up, leave the box empty.
Pick a short name so you recognize this account in the app (for example your restaurant name).
Same text as in server-config.js → saveSecret. Skip if you never added a server password.
Check the box below, then click the button. Everyone must scan the new QR. You need either your server password or a browser that’s still signed in as an editor.
In Google Authenticator: + → Scan a QR code
saveSecret in server-config.js so the password isn’t stored there — the phone code still protects saves.totp-setup.html from the server after pairing.