Create vault
First-time registration. Two logins share the same password and PIN.
su-<username> — super (delete + view secrets)<username> — standard (create only, copy secrets, no delete)
Daily login is username + PIN only. Store the secret key offline. Two wrong key attempts wipe the vault.
PIN must be reset every 30 days.