First sign-in only — you'll create a passkey next, and password sign-in is then disabled.