# HomeSyncHub v6.4 Security + Notification Update

## Branding and layout
- Header and footer branding now use normalized responsive frames so the logos stay inside the frame on desktop, tablet, Android, iPhone, and browser zoom.
- Personalized profile/dashboard background rendering has been disabled to keep the app background consistent.
- The login/welcome frame now uses `assets/brand/family-schedule-commandcenter-integrated.png`, built from the supplied family schedule image with the command-center heading and feature tiles integrated into the white panel.

## Bell notifications
- The top bell is clickable and opens an upcoming-alert panel.
- Alert count is based on the workspace reminder window, defaulting to 30 minutes before due/start time.
- Opening the bell plays a short local reminder alarm sound.
- Browsers usually block automatic sound until the user interacts with the page; after the first interaction, due-soon reminders can play the local alarm.

## Light/Dark mode
- A top-bar Light/Dark toggle was added for quick switching.
- The existing Settings page still supports Dark, Light, and Auto.

## Password recovery
- Users can request password recovery through the Recover tab on the login page.
- Recovery links are generated for the registered email address only.
- For local XAMPP/PHP installs where `mail()` is not configured, the recovery message is still stored internally in the JSON store after a request, but the Recover screen no longer exposes that implementation detail.
- Reset links expire after 1 hour and are single-use.

## Two-factor authentication
- Users can enable TOTP 2FA from Settings → Account Security.
- Compatible with Google Authenticator, Microsoft Authenticator, Authy, 1Password, and similar apps.
- The setup displays a manual key and otpauth URI.
- Once enabled, login requires password + 6-digit authenticator code.

## Notes
- This is still a local PHP/PWA build. Production email delivery should be connected to SMTP or a transactional email provider.
- Native background push notifications require Web Push setup and user notification permissions; this version provides an in-app bell and local reminder sound.
