Why am I asked for my password before some actions?

Sensitive actions ask you to confirm your identity — the confirmation then lasts 60 minutes.

Actions that delete data, move money or change who has access — refunds, bulk wipes, deleting staff, rotating the portal link and similar — ask you to re-confirm your identity first, so a walked-away-from screen can't be used to do real damage. You confirm with your account password (or a "Confirm with Google" button if you sign in with Google), and the confirmation then lasts 60 minutes, so a run of admin work only asks once. After you confirm, the dialog stays up showing "Confirmed — applying now…" until the action finishes, so you always see it complete. On a shared front-of-house device where no password session is available, certain customer-money actions (like deposit refunds and ticket cancellations) can instead be approved with a manager's PIN — see How do approvals with a manager's PIN work?