One short setup. After this, only people with the code in Google Authenticator can save changes to your menu on the server.
data/.ada-save-secret), have that password ready to paste
below. If you never set one up, leave the box empty.
Pick a short name so you recognize this account in the app (for example your restaurant name).
Same text as in server-config.js → saveSecret. Skip if you never added a server password.
Check the box below, then click the button. Everyone must scan the new QR. You need either your server password or a browser that’s still signed in as an editor.
In Google Authenticator: + → Scan a QR code
saveSecret in server-config.js so the password isn’t stored there — the phone code still protects saves.totp-setup.html from the server after pairing.