Secure Onboarding

Complete master-password setup, passkey-first MFA enrollment, and account recovery controls.