Skip to content
qrcodegenerator.inStaff consoleStaffadmin.qrcodegenerator.in
BEFORE YOU SIGN INWhat this console can and cannot do
Never linked from a customer surfaceThis console lives on its own subdomain and is not reachable from any customer navigation.
Staff roles are a separate systemThese five roles enforce against different tables to the seven customer workspace roles. Crossing that boundary is a security issue, not an inconsistency.
Impersonation is visible and auditedViewing as a customer needs a stated reason, shows an amber banner throughout, and writes both start and end events.
Redirects are outside your reachNo action here can stop a printed code resolving. Suspension replaces a destination with an interstitial; the code still answers.
Every action is loggedRefunds, takedowns, flag changes and credit grants all require a reason and appear in the audit log against your name.
Break-glass accessIf a platform-level auth fault locks everyone out, a dedicated environment variable fails open — checked outside the normal flag system, so a bad flag cannot disable the recovery path.
1 · Password2 · Authenticator

Staff sign-in

Two-factor authentication is mandatory on this console. A request without it is rejected at the API, not just hidden in the interface.

Only qrcodegenerator.in addresses can sign in here.
Forgot it?
No social sign-in here. Staff access uses email, a password and TOTP only. Fewer paths in means fewer paths to audit.

Every action in this console needs a reason and is logged against your name.