Home Server

Public access requires password and authenticator code.

Trusted phones skip the authenticator code next time, but still use a secure signed cookie.