Passkeys, email recovery, and a calmer sign-in
The last few builds rebuilt the front door: passkey sign-in, password reset by email, and an easier way to set up two-factor.
Signing in is the one screen every user meets every day, so a run of recent builds was spent making it both safer and less annoying.
Passkeys
You can now sign in with a passkey — your fingerprint, face, or device PIN — instead of a password. It is phishing-resistant by design and faster than typing anything. One practical note: passkeys require your install to be reachable at a hostname; a bare IP address will not work, because browsers refuse to create passkeys for one.
Password reset by email
If email sending is configured on your install and your profile has an email address, you can recover a forgotten password from the sign-in screen instead of reaching for the command line.
Two-factor, minus the typing
Setting up two-factor authentication now shows a QR code you scan with your authenticator app, instead of a secret you copy by hand.
All of this is in the current builds — update your install and it is there.
