Passkeys are live, and two-step sign-in actually works now

You can now sign in with a passkey — your fingerprint, face or device PIN, or a security key. Choose Continue with a passkey on the sign-in page. It cannot be phished, there is no code to type, and the biometric check happens entirely on your own device: no fingerprint or face data ever reaches SIMCOAI. This also corrects something worse than a missing feature. The Security page previously offered an authenticator-app setup that saved the code to this workspace, which sign-in stopped consulting when it moved to the secure sign-in service — so you could set up two-factor authentication, be told it was active, and never once be asked for a code. That setup has been removed and replaced with what genuinely protects the account. Authenticator apps and security keys are now supported by the sign-in service too; ask us to switch them on for your account.