# Test logins (local development only)

Every account below is created by the seeders (`php artisan migrate:fresh --seed`) and exists only on a
local or test database. Never use these passwords on a live server.

**Staff sign-in:** http://localhost/church_acct_app/public/app/login
**Platform owner console:** sign in at the same address as super@platform.test

| Password | Used by | Defined in |
|---|---|---|
| `Demo@12345` | Grace Assembly (Demo), the two small churches and the platform owner | `DEMO_PASSWORD`, `database/seeders/DatabaseSeeder.php` |
| `Toprc@2026!` | Old Path Revival Church (TOBAS) | `TEST_PASSWORD`, `database/seeders/TobasSeeder.php` |

## Grace Assembly (Demo): no two-factor, best for trying every screen

All see the whole church (no branch set). Password `Demo@12345`.

| Email | Role | Good for |
|---|---|---|
| admin@demo.church.test | Administrator | Everything, settings, users |
| treasurer@demo.church.test | Treasurer | Approving, paying, banking, cheque books, campaigns |
| finsec@demo.church.test | Financial Secretary | Giving batches, posting, members, pledges |
| accountant@demo.church.test | Accountant | Reviewing requisitions, journals, reconciliation, paying |
| pastor@demo.church.test | Senior Pastor | Approving requisitions, budgets, welfare |
| counter1@demo.church.test | Counting team | Counting and signing giving batches |
| counter2@demo.church.test | Counting team | The second counter's signature |
| auditor@demo.church.test | Auditor | Read-only, audit trail |
| media@demo.church.test | Department head | Raising requisitions |
| welfare@demo.church.test | Welfare officer | Welfare cases |
| shop@demo.church.test | Bookshop / unit manager | Business units, sales |
| secretary@demo.church.test | Board secretary | Meetings and minutes |
| trustee@demo.church.test | Trustee | Governance |
| staff@demo.church.test | Staff member | Own leave only |

## Old Path Revival Church (TOBAS test church): branches and two-factor

Password `Toprc@2026!`. Accounts marked **2FA** must set up two-factor (an authenticator app) at first
sign-in; use an authenticator on your phone.

| Email | Role | Branch | 2FA |
|---|---|---|---|
| hq.admin@toprc.test | HQ Administrator | Headquarters (every branch) | 2FA |
| hq.finance@toprc.test | HQ Finance Officer | Headquarters (every branch) | 2FA |
| auditor@toprc.test | External Auditor (read-only) | Headquarters (every branch) | 2FA |
| editor@toprc.test | Content Editor | Headquarters | |
| ikeja.admin@toprc.test | Branch System Admin | Ikeja | 2FA |
| ikeja.treasurer@toprc.test | Treasurer | Ikeja | 2FA |
| ikeja.cashier@toprc.test | Cashier / Clerk (keeps the Ikeja petty cash float) | Ikeja | |
| ikeja.pastor@toprc.test | Pastor (read-only) | Ikeja | |
| ikeja.ministry@toprc.test | Ministry Leader | Ikeja | |
| ajah.treasurer@toprc.test | Treasurer (for branch-isolation checks) | Ajah | 2FA |

## Other churches and the platform

Password `Demo@12345`.

| Email | Role | Notes |
|---|---|---|
| super@platform.test | Platform owner (SaaS super-admin) | Sets up two-factor at first sign-in |
| admin@livingfaith.test | Administrator, Living Faith Chapel, Ibadan | Church on a trial plan; 2FA at first sign-in |
| admin@christmission.test | Administrator, Christ Mission Church, Jos | Lapsed subscription (read-only state); 2FA at first sign-in |

## Members (portal)

Members do not have passwords. On the member portal they sign in with a one-time code sent to their email
or phone (the portal must be switched on under Setup); locally the code appears in **Messages** and in
`storage/logs` when mail is set to `log`.