Two-factor authentication (TOTP)
Add a second factor: your password plus a 6-digit code from an authenticator app (Aegis, 1Password, Google Authenticator…). Recovery codes cover a lost phone. Worth doing on any till that can also reach the back office.
Backups
Everything you own, in one click. The JSON export covers every table — customers, programs, the points ledger, rewards and redemptions — with every password, key and other credential redacted, so it is the copy you can hand to someone; the database file is the rawest possible backup on SQLite installs and is not redacted.