Why am I asked for my password before some actions?

Sensitive actions ask you to confirm it's you — the confirmation then lasts 60 minutes on the device you confirmed on.

Actions that delete data, move money or change who has access — refunds, bulk wipes, deleting staff, rotating the portal link and similar — ask you to re-confirm your identity first, so a walked-away-from screen can't be used to do real damage. If you've added a passkey, click Use your passkey and use your device's Face ID, fingerprint or screen lock (see How do I sign in with Face ID or a fingerprint (passkeys)?) — or confirm with your account password (or a "Confirm with Google" button if you sign in with Google), and the confirmation then lasts 60 minutes on the device you confirmed on, so a run of admin work only asks once. It belongs to that device: your phone asks for itself even if you've just confirmed on your computer, signing out ends it, and a tab left in the background for 15 minutes locks it again. While it's on, your account menu (your name at the foot of the sidebar) shows Confirmed — 42 min left (the minutes count down) with Lock now to end it straight away; when nothing shows there, this device will ask you next time. After you confirm, the dialog stays up showing "Confirmed — applying now…" until the action finishes, so you always see it complete. On a shared front-of-house device where no password session is available, certain customer-money actions (like deposit refunds and ticket cancellations) can instead be approved with a manager's PIN — see How do approvals with a manager's PIN work?