Signing in to the back office

Open manager.leisurenexus.app (or leisurenexus.app) and enter your Email and password.
Tick Keep me signed in on this computer only on your own computer — never on a shared one.
Press Sign in.
If two-step sign-in is on, type the 6-digit code from your authenticator app. Lost the phone? Use a Recovery code instead.

New staff sign in with the temporary password they were given and must choose their own password first.

Forgot your password

Forgot password emails a link that works for one hour. The page says the same thing whether or not the email has an account, so nobody can use it to find out who works for you. Passwords found in known data breaches are refused.

Your own security page

Top right → your name → Password & two-step sign-in. Everything here applies to you only.

Setting	What it does	When to use it
Two-step sign-in	After the password, asks for a code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password). Gives 8 recovery codes, each usable once.	Always for owners and managers — a stolen password alone can't open the books.
Create new recovery codes	Replaces the 8 codes; the old ones stop working.	You lost the printed codes.
Change password	Sets a new password; you stay signed in on this device.	Every 6 months, or when someone leaves.
Register PIN	The 4–6 digit PIN you type after tapping your name on the register. Managers also use it to approve voids, refunds and price changes.	Before your first shift. Weak PINs such as 1234 are refused.
Require two-step sign-in for managers	Owner only: managers must turn on two-step sign-in before they can use the back office.	Any business with more than one manager.
Allow support access	Lets LeisureNexus support open your back office for 1 hour, 24 hours or 3 days. It ends by itself; Turn off now ends it early.	You contacted support and they need to look.

How the register signs people in

Registers never use staff passwords. A paired device holds a secure device token; each cashier taps their name and types their PIN. Five wrong PINs lock that name for a few minutes. The register locks itself after 5 minutes without a touch when no sale is open.

Support access, safely

Support can only open your account while you allow it, a banner shows while they are in, and everything they do is written to the Activity log under their name. Support never sees passwords, PINs or payment keys.

Keeping the account safe

Give each person their own login — never share the owner's.
Use roles to give only the access each job needs (Roles and permissions).
Switch Active off in Staff & roles the day someone leaves; resetting a password signs them out everywhere.
Review the Activity log for sign-ins and price changes (Staff, roles and security).