Umbra

No signup, no self-service reset. Failure reads the same for a wrong password and an unknown account. Eight failures in fifteen minutes locks the address for fifteen minutes.

From Brandon's own PowerShell, not from here: npx.cmd wrangler d1 execute umbra --remote --command "UPDATE users SET totp_secret=NULL, totp_confirmed_at=NULL WHERE email='you@umbraautomation.uk'" — the next sign-in re-enrols the authenticator. Password resets are the same route (a new invite from an owner).