Sign in with the username and password issued for you. Both are exchanged for a session; neither is stored in this browser.

Enter the one-time setup code you were given and choose your own password. Nobody else ever sees it — not even whoever issued the code.

The device token issued for your account — the same one the app uses. This is the older way in and will be withdrawn; ask for a username and password if you do not have one.