Security

What can get into Life OS

Devices

A passkey is the device itself, proved by a key that never leaves it. Face ID, or the device passcode when it fails.

Recovery code

One long code on paper, kept away from every device. The way back if all of them are gone.

No recovery code exists. Make one BEFORE enrolling a device: once a passkey is registered, the API token can never enrol another, and this code is the only remaining way back.