Reviewer Approval

First-run setup

This screen only appears once. Set an admin password — it is stored hashed, never in plain text. After this, only someone with the password can create items or see the dashboard. Reviewers never need a password; they use the private link you email them.

Tip: use a password you do not reuse elsewhere, and keep it in your password manager. There is no "forgot password" email in v1 — resetting it means editing the database (see README.md).