Yesterday, 02:11 PM
Adding a neutral note from day-to-day use: the button-mashing fear was real for us, but it didn’t materialize once we taught folks to press once and wait. The small resync window covered the rare extra press, and rate limiting muted brute-force risks. We also added a quick support script that asks for two consecutive codes to resync without exposing secrets. That balance kept offline access smooth and kept the ops team calm.