The issue I ran into with this was I could initiate a login for anyone and if they accidentally hit the link I could remote login.
Switched to pin code entry, less fancy but achieves all the desired UX
Switched to pin code entry, less fancy but achieves all the desired UX