Secure sign-in for customers and new registrations. One mobile number, one account.
Secure flow: cryptographic OTP, one-time use, 5 wrong attempts max, 15 minute lock after failures, resend cooldown, CSRF protection and rate limiting.