Log in
Both are asked every time: the password, then your passkey.
Add a passkey
This link works once, for ten minutes. It came from kpanel passkey-link on the gateway.
Granting access stays on the phone. From here a device can be revoked and a session ended, after a fresh passkey check.
To add one, run kpanel passkey-link on the gateway and open the link it prints.