For sealed emergency accounts only. Sign-in uses the account's hardware passkey, lasts 2 hours, cannot move money, and automatically opens a security incident that a different administrator must review.