OuijaMail security-key enrollment (staging)

Passwordless sign-in setup. You must register two authenticators in this session — a hardware key and a synced passkey. The second authenticator is your recovery: with one credential, losing it is lockout.

Person session token (provided out-of-band) Label for this authenticator this is a synced passkey (iCloud / Google)

Then prove login (passwordless): Email

Log