Human session

Sign in

Password + TOTP are the first factors. Passkeys are visible but disabled until Nest locks the WebAuthn RP ID.

Password + TOTP

Passkey

WebAuthn must not run against localhost or an invented hostname. This button stays disabled until the production RP ID is locked.