The Temp, the Tills and the Master Password: A Hull Shop's 30-Minute Access Handover
Photo: National Archives and Records Administration. Office of the Federal Register. 4/1/1985, Public domain, via Wikimedia Commons
Christmas in Hull has a rhythm. The lights are up, the late-night shopping is on, and your Saturday queue is starting to look like the bus queue on Beverley Road. Somewhere in that rush, a friend's nephew or a student from the university starts on the tills. You have ten minutes between deliveries and a card machine that needs its paper changed. The easiest thing in the world is to say: 'Just use my login.'
It works today. It becomes a January mess.
A seasonal temp does not need to be you. They need a named way into the till, a card machine PIN that is theirs, a Wi-Fi connection that is not your back-office network, and a social media role that can be removed without changing every password you own. That is not a big IT project. It is a one-page sheet and half an hour before the rush.
Why 'Just Use My Login' Is a November Favour You Pay For in January
Shared logins feel efficient because they skip a conversation. The problem is what they hide. If the till records every sale under your name, you cannot tell who voided a transaction or who was on the till at 4:40pm on the busiest Saturday of the year. If the temp has your card machine admin login, they can do more than take a payment. If they have your social media password, you are trusting them with the shop's voice, your messages, and possibly your saved payment details.
The other issue is the exit. A shared login has no off switch. When the temp finishes in early January, you either change the password and update every device in the shop, or you leave the old password working because you are too tired to deal with it. Neither is a good start to the year.
What a Christmas Temp Actually Needs (And What They Don't)
Start by separating the systems. A small shop often has four or five: the till or EPOS, the card machine, the shop Wi-Fi, the back-office computer or tablet, and the social media accounts. They are not one thing, and they should not be handed over as one thing.
The till and card machine
A temp needs a named till account with the permissions to do their job: take payments, process refunds only if you trust them to, and print a receipt. They do not need manager overrides, stock deletion, price changes, or the reports that show your margins. On the card machine, set them up as a user with their own PIN if the terminal supports it. Keep the admin or settlement login with you. If the machine only has one user profile, write down the PIN you gave them and plan to change it in January.
Wi-Fi and the back-office computer
Do not hand over the password to the network that connects your till, card machine and back-office computer. If your router supports a guest network, put the temp on that. If it does not, create a separate staff Wi-Fi name for phones and breaks, or simply say no personal phone use on the shop network. The back-office computer should have its own login for the temp, or no login at all if they do not need it. A shared desktop session is how browser passwords and saved card details get seen by accident.
Social media and the shop email
A Christmas temp might be brilliant at taking photos of the window display, but they do not need the shop's Instagram password. Use the platform's own roles: add them as an editor through Meta Business Suite, or use a scheduling tool where you can invite them without revealing the main password. For email, use delegation or a separate mailbox rather than giving out your main password. If the shop uses a shared inbox, set up a rule or a label for temp-related messages and keep the password in your password manager, not on a sticky note by the till.
The 30-Minute Handover, Start to Finish
Do this before the first shift, not during it. Ten minutes to decide what they need. Ten minutes to create the accounts. Ten minutes to walk through the shop and fill in the sheet.
- Write down every system the temp will touch. Till, card machine, Wi-Fi, email, socials, the key safe, the alarm. Cross out anything that is not essential for their first two weeks.
- Create named accounts wherever the system allows it. If the till only has generic users, use a clear temporary name such as 'Xmas Staff 1' so you can spot it later.
- Put the details on one sheet. Not in a group chat, not on the back of a receipt. One sheet that stays in the office.
- Walk them through the first login in person. Watch them do it once. Make sure they are not saving the password in a shared browser.
- Set a review date. Put it in your phone for the first week of January.
The One-Page Handover Sheet
Print this, fill it in, and keep it with the shop diary. It is deliberately boring. Boring is what you want when you are trying to remember what you gave the Christmas temp.
| System | What the temp needs | How it is given | Who set it up | Date set up | Revoke by | Notes |
|---|---|---|---|---|---|---|
| Till / EPOS | Named staff login, basic sales only | Staff account or 'Xmas Staff 1' | First week of January | No manager override | ||
| Card machine | User PIN, not admin | Terminal user menu | First week of January | Write PIN here only if you must | ||
| Shop Wi-Fi | Guest or staff network | Guest password | Last shift | Not the till network | ||
| Back-office PC | Named login or no access | Local user account | Last shift | No saved browser passwords | ||
| Social media | Editor or contributor role | Business Suite invite | Last shift | Remove role, do not just change password | ||
| Shop email | Delegated access or separate mailbox | Mail admin settings | Last shift | No forwarding to personal email | ||
| Alarm / key safe | Opening or closing code if needed | In person | Last shift | Change code in January |
The January Revocation Checklist
When the tinsel comes down, the access should come down with it. Work through the sheet and tick each line.
- Disable or delete the temp's till account. Do not just change the name.
- Remove their card machine user or change the shared PIN.
- Remove their device from the Wi-Fi. If you used a guest network, change the guest password if it was shared widely.
- Delete the back-office computer login or change its password.
- Remove their social media role in Business Suite or the scheduling tool. Check the shop's page roles, not just the password.
- Remove email delegation and check for any forwarding rules you did not set up.
- Change the alarm code and collect any keys or fobs.
- Review the till for voided sales, refunds and no-sale opens from the Christmas period. A quick scan is enough.
- Update the handover sheet with the date everything was revoked. Keep it for your own records.
A Hull Shop's Small Print
You do not need a security policy the length of the Humber Bridge. You need a habit: named access, a written sheet, and a January date in the diary. The Christmas temp gets to do the job without borrowing your identity, and you get to start 2027 without wondering who still has the old card machine PIN. In a small shop on Princes Avenue or in the Old Town, that half hour is probably the best-spent time of the whole season.
