# Pairing the Browser App
> Source: https://www.fuze-store.com/docs/hub/pairing-browser-app

# Pairing the Browser App

If you run Fuze Store in a **web browser** (Chrome, Edge, or Safari at `store.fuze-store.com`) on the same computer as Fuze Store Hub, you'll need to pair the browser with the Hub once. Pairing gives the browser its own short-lived **session token** scoped to that browser — the same per-device model the mobile apps use.

You only need this cert-trust flow on **web**. iPhone and Android tablets pair through the in-app wizard described in [Pairing the Mobile App](/docs/hub/pairing-mobile-app).

## Why a separate flow?

Modern browsers block insecure (`http://`) requests from a secure (`https://`) page — that's called the **mixed-content policy**. The browser app is served over HTTPS, so Fuze Store Hub also serves a parallel HTTPS endpoint at `https://localhost:18443` that the browser can reach. The catch: the certificate is **self-signed**, so Chrome warns you the first time. You accept the warning once, then exchange an 8-digit code for a session token, and you're done.

## What you'll need

## The four steps

In the browser, sign in to **Fuze Store** at `store.fuze-store.com`, then go to **Configurations → Integrations → Fuze Store Hub**. You'll see a **Pair this browser with Fuze Store Hub** card. Click **Get started**.

![The Configurations › Integrations › Fuze Store Hub screen in Fuze Store, showing the Pair this browser with Fuze Store Hub card with a Get started button](/docs/hub/hub-pairing-browser-preferences.png)

Click **Open trust page**. A new tab opens at `https://localhost:18443/health`. Chrome shows a warning that the connection is private to your computer — that's expected.

Click **Advanced** in the warning, then **Proceed to localhost (unsafe)**. You'll see a small JSON response confirming the Hub is up. Close that tab and click **Verify connection** back in the wizard.

![Google Chrome showing a "Your connection is not private" warning for localhost with the Advanced link and Proceed to localhost (unsafe) option highlighted](/docs/hub/hub-pairing-browser-cert-warning.png)

"Unsafe" sounds scary, but the connection only ever leaves your computer's loopback network — it doesn't go to the internet. Chrome warns the same way for any self-signed cert. You only do this once per browser.

If you need to change the Hub's HTTPS port (the default is **18443**), expand the **Advanced** section in this step and edit it before clicking Verify.

On the Hub computer, open **Fuze Store Hub → Settings → Network**. Find the **Pair the browser** card and click **Generate code**. An 8-digit code appears with a 5-minute countdown.

![The Fuze Store Hub Network settings screen showing the Pair the browser card with an 8-digit one-time code and a 5-minute countdown timer](/docs/hub/hub-pairing-browser-code.png)

Back in the browser, you have two ways to bring the code over:

- **Type it** — read the 8 digits off the Hub and type them into the wizard.
- **Scan the QR** — click **Scan QR code** in the wizard, allow camera access, and point the camera at the QR shown beside the code in the Hub. The wizard reads the code automatically.

Either way, the wizard submits the code and exchanges it for a 30-day session token. The token is saved to your store preferences so it survives a tab refresh.

The wizard lands on a **This browser is paired** screen. Printing, kitchen display, and customer display now work from the browser tab. Click **Save** at the bottom of Preferences to persist the change.

If you ever want to pair a different browser or revoke this one, click **Disconnect** in the wizard. To rotate without losing settings, click **Re-pair** — it walks you through the same flow with a new code.

## What's actually stored?

| Where | What | How long |
| --- | --- | --- |
| Browser preferences (cloud) | 32-byte hex session token | 30 days, then you re-pair |
| Fuze Store Hub on this computer | Hash of the same token + paired-at timestamp | Until you click **Disconnect** or **Revoke all** in Hub Settings |

The 8-digit pairing code itself is **single-use** and **expires after 5 minutes** — even if you typed it into the wizard, it can't be replayed.

## Common errors

## Revoking a paired browser

In Hub → Settings → Network → **Pair the browser**, the card shows the count of active sessions. Click **Revoke (N)** to invalidate every paired browser at once. They'll fall back to the wizard the next time they try a Hub call.