Private. Face ID only.
First time on this device: enter the setup code from Vercel, then register Face ID.