C7. Advanced settings (database security)🔗

In brief🔗

The Advanced section of the Settings groups together the sensitive operations: database encryption / decryption, access to the backup, kiosk mode and diagnostics available only in development.

Who / when🔗

For the Admin, at installation (enable encryption) and for maintenance operations.

How to access🔗

Admin → Settings → Advanced section (left column).

Requirements🔗

🔑 Manage settings

Database encryption🔗

This is the most important point of this section. PosCaisse can encrypt the entire local database (SQLCipher), so that no one can read your data without the key.

Two ways to encrypt:

Encrypt with the admin PIN: the key is derived from the administrator PIN.
Encrypt with a password: you define a dedicated password.

To revert: Decrypt the database (by entering the admin PIN or the password).

Without the key, no recovery

If you encrypt with a password and lose it, the database becomes permanently unreadable — including for support. Keep the key in a safe place.

Encryption also protects cloud backups

When the database is encrypted, your cloud backups are too (the data leaves encrypted to the server). If the database is not encrypted, PosCaisse warns you before a cloud upload and lets you decide. See C14. Backup & restore. After enabling encryption, restart the register to apply the protection.

Other accesses in the Advanced section🔗

Backup → Backup & restore.
Kiosk mode: locking of the register in dedicated mode if the hardware and configuration allow it.
Development tools: present only in the development version.

Procedure: enable encryption🔗

Admin → Settings → Advanced.
Choose Encrypt with admin PIN or Encrypt with password.
Enter/confirm the key.
Restart the register to apply.

Messages & edge cases🔗

Enabling/disabling encryption requires a restart.
An incorrect admin PIN or a wrong password prevents decryption.

Tips🔗

Enable encryption right at installation (empty database), it is the simplest moment — see Initial setup & sign-in.