TARGET NOWNOW

B2C Log In Procedure

Rev

Dated

2026-10-27

Flag

APPR-PUB

Applies to

skillnownow.com

Audience

B2C & Free Users

Purpose To explain the log in process for B2C customers and free users into the TARGET NOWNOW self-practice DCS simulation platform.

Section 1

Free Token Log In

A free token is a code issued by TARGET NOWNOW that grants access to one or more simulation modules for a set period at no charge — 30 days by default, and any period from 1 to 365 days at the issuer’s discretion. It is used for trials, evaluations and sponsored access.

A token cannot create an account. You must register and verify your email first. The token then adds modules to an account that already exists. This is deliberate: a code that could create accounts would mean ten strangers on the platform if it ever leaked.

Steps

Obtain a code from TARGET NOWNOW. It looks like TZ-BANG-WVXV — every code begins TZ-, followed by eight characters in two groups. The characters 0, O, 1, I, 5 and S are never used, so a code can be read aloud without confusion.
Register at skillnownow.com — see Section 2 for the full field list.
Verify your email. Click the link sent to the address you registered. Access is not available before this.
Log in and enter the code — one step. Open the redeem page and enter your USER_ID (the email you registered), your PASSWORD and the TOKEN, then select AUTHORIZE ACCESS: you are signed in and the code is redeemed in one action. If you are already signed in, only the code is asked for — select REDEEM. Case does not matter. A link that carries the code fills it in for you, but nothing is redeemed until you select the button.
Confirm. The granted modules are listed with their expiry dates and you are taken to your catalogue, where each module shows its own expiry date, counted from redemption for the period set on the code.

If the code is refused

The system replies That code is not valid. for every failure case — unknown, revoked, expired, fully redeemed, or every module on it withdrawn. This is intentional: a message that distinguished those cases would tell someone guessing codes that a code existed. Contact TARGET NOWNOW with the code and the date you received it.

The one different message is You have already used this code. — a code counts once per account, and a second click grants nothing twice.

After 10 attempts in 15 minutes the system replies Too many requests. Please wait and try again. — wait, then retry.

Section 1 — free token redemption. Registration and email verification precede the code; the code never creates an account.

Section 2

Register as a Paid User

2.1 Details to be provided

Field	Required	Notes
Full name	Yes	2–120 characters. This name appears on your practice record, which employers may verify — enter it as it appears on your identification.
Email address	Yes	Must be reachable. The confirmation link is sent here, and it is your login identity.
Password	Yes	See 2.3.
Confirm password	Yes	Must match exactly.
Accept terms	Yes	Includes the sharing consent at 2.2. Registration is refused without it.
Phone	No	Country code and number, collected at registration since Sep-2026. Optional — registration succeeds without it.

2.2 Consent — sharing of your TARGET NOWNOW report

By accepting the terms you consent to the following. Your TARGET NOWNOW practice record — your name, the modules you have practised, hours accrued and scores achieved — may be shared with recruiters, employers and other companies for the purpose of verifying your competency claims.

This is the purpose of the record. An employer given your verification code can confirm that the hours and scores are genuine. Email verification at registration is what makes that trustworthy: without it, anyone could attach any name to a set of practice hours, which would undermine the record for everybody.

2.3 Password requirements

Rule	Requirement
Minimum length	12 characters. 15 or more is recommended — length matters far more than symbols.
Common passwords	Refused. Checked against a list of 321,000 known-common passwords, including plant-domain terms such as `refinery2025` and `Compressor99`.
Breached passwords	Refused. Checked against a public database of passwords exposed in real data breaches, even if long.
Your own details	Cannot be your email address, or contain the part of it before the @.
Maximum length	Refused beyond 72 bytes, rather than silently truncated.

If the safety check is unavailable, registration is refused — you will see "the password safety check is temporarily unavailable". Wait a minute and try again. The platform will not accept a password it could not verify, because an unverified password stays in place for years.

A good password is long and unusual, not short and decorated: Vh3-cobalt-quarry-Nx71-driftwood passes. P@ssw0rd! does not.

2.4 Do's and Don'ts

✓ Do

Use a unique password for TARGET NOWNOW, not one reused from another site.
Use a password manager, or a long passphrase of unrelated words.
Register with your own name as it appears on your ID.
Verify your email promptly — the link expires.
Log out on shared or public computers.
Tell TARGET NOWNOW immediately if you suspect your account has been accessed.

✕ Don't

Do not share your password with anyone, for any reason. Staff will never ask for it.
Do not share your account or let another person practise under your name.
Do not register on behalf of someone else.
Do not reuse a password from another service.
Do not save your password in a shared document or messaging app.

Consequence of sharing. Your practice record is a statement about you. If another person practises under your account, the record becomes false — and an employer who discovers it has reason to distrust every record we issue. Account sharing is a breach of the terms of use and will result in termination of the account and invalidation of the practice record, with no refund of any paid subscription.

Automatic protection against guessing. Separately from the rule above, the platform locks an account for 30 minutes after 15 failed login attempts. This is automatic and temporary — it protects you against someone guessing your password, and it clears by itself.

Section 2 — registration. No account exists until the emailed link is clicked; the record is PENDING until then. Signup lands on the FREE tier, from which a paid subscription may be purchased.

Section 2A

Available Modules — Register, Redeem a Token

Each module is granted individually by a free token (Section 1) and is valid for the period set on the code, counted from redemption. You may hold any number of modules at once, and each carries its own expiry date.

2A.1 Live module list

Loading the current list…

This list is generated from the platform, not typed into this page. When SUPER_ADMIN registers a new module and makes it visible to B2C, it appears here on the next page load. When a module is hidden, it disappears. There is one definition of what B2C may see, and this page reads it rather than keeping a second copy that would eventually disagree.

2A.2 How to obtain a module

Online payment is not available yet. The catalogue may show a price and a BUY or RENEW button, but no purchase can be completed through it today.

Register and verify your email (Section 2). Signup places you on the FREE tier — no card is required to create the account.
Open the catalogue. Every module visible to B2C is listed, with those you already hold marked as held. A module marked INCLUDED opens without a code.
Obtain a code from TARGET NOWNOW and redeem it (Section 1). The modules on the code are added to your account at once.
Check the expiry date. Each module runs for the period set on the code, counted from redemption, shown on the module tile.
Your practice record is kept whether or not a module is current.

Modules expire independently. Each module carries its own clock, running from its own redemption for the period set on its code.

Section 3

Log In — Paid User

3.1 Steps

Go to skillnownow.com and select LOG IN.
Enter your email address — the one you verified at registration.
Enter your password.
Submit. On success you are taken to your module catalogue.
Open a module you hold. Modules you do not hold show as locked, with an option to purchase.
Log out when finished, particularly on a shared computer.

3.2 What you can reach once logged in

Area	Available to
Module catalogue	All logged-in users. Held modules open; others show as locked.
Simulation modules	Only modules you hold, whether purchased or granted by token, and only before expiry.
Practice record	All users, showing hours and scores accrued.
Verification code	Issued for your record so an employer can confirm it independently.

3.3 If log in fails

Situation	What you see	What to do
Wrong password	A single generic failure message	Re-enter carefully. The message is deliberately identical whether or not the account exists, so an attacker cannot discover which addresses are registered.
15 failed attempts	Temporarily locked	Wait 30 minutes. It clears automatically — no action needed.
Email not verified	Access refused	Use the confirmation link, or request a fresh one.
Module expired	Module shows locked	Renew or purchase. Your practice record is retained.
Session ended	Returned to log in	Log in again. Sessions expire for your protection.
Password forgotten	—	Select FORGOT PASSWORD? on the log-in page and enter your email. A reset link is sent to that address; it works once and expires in one hour. We cannot look your password up — it is stored so that nobody, including us, can read it back.

Resetting your password signs you out everywhere. Every active session ends the moment the new password is set. If someone else had obtained your password, a reset removes their access as well as changing the password — which is the point of doing it.

Section 3 — three checks in order: credentials, then email verification, then entitlement. A module you do not hold shows as locked with a purchase option rather than failing.

Document control

Revision Record

Rev	Date	Author	Approver	Flag	Change	Reason
01	AUG-2026	—	Principal	`APPR-PUB`	Issued; published at `b2c_login_procedure.html`.	—
02	2026-10-26	Procedure Developer	Principal	`APPR-PUB`	(1) Token period: 30 days default, 1–365 set by issuer (§1, step 5, figure, §2A note). (2) Code format `TZ-XXXX-XXXX` (step 1, figure). (3) Log in and redeem merged into one step — USER_ID, PASSWORD, TOKEN, AUTHORIZE ACCESS; REDEEM when signed in; link pre-fill never redeems. (4) Refusal wording: all modules withdrawn; 10-attempts-in-15-minutes limit added. (5) Phone: optional, collected at registration. (6) §2A.1 live list read from public `/purchase/b2c-modules`, not the signed-in catalogue. (7) §3.3 password-reset row and sign-out-everywhere note. Items (1), (2), (5), (6), (7) bring the master level with corrections already made to the served copy on 2026-09-08. Approved by the Principal 2026-10-26 and published at `b2c_login_procedure.html`; Rev 01 superseded.	Gap analysis against live code (task-def 374)
03	2026-10-27	Procedure Developer	Principal	`APPR-PUB`	(1) §2.3 "Your own details": "Cannot contain your name or email" → "Cannot be your email address, or contain the part of it before the @" — the B2C registration check passes the email only (`gateway/routers/b2c_register_router.py`, `gateway/password_policy.py`). (2) §2A heading, lead paragraph, §2A.2 and its expiry box no longer tell B2C users to select and pay: online payment is not available (BUY posts to `/purchase/stub`, SUPER_ADMIN-only and disabled in production); modules are added by a free token (Section 1); INCLUDED modules open without a code. Approved by the Principal 2026-10-27 ("QMS-008 Rev 03 - APPROVED") and published at `b2c_login_procedure.html`; Rev 02 superseded.	Gap-analysis fix approved by Principal 2026-10-27

TARGET NOWNOW · B2C Log In Procedure · Rev 03 · 2026-10-27 · self-practice DCS simulation platform. Prepared from the deployed system. Review on any change to registration, password policy or entitlement.