Mirror the BLE pin rules on WiFi builds so the recovery AP always has a knowable password: devices with a display get a random per-session pin shown as Pin:NNNNNN on the home screen, headless devices default to 123456, and 'set pin' overrides both persistently. The AP password is the active pin zero-padded to 8 digits (WPA2 minimum), so a fresh device is never an open AP. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>