Single-user. Passkeys preferred (WebAuthn). Magic link fallback. TOTP available in Supabase settings.
Only the pre-approved email will be allowed. Register passkey after first magic sign-in.