Optional, but worth doing once. Enter the RECOVERY PIN, phone and email set at enrollment -- for a minor these are the GUARDIAN'S phone and email; for an adult, your own -- and DEIS hands back your encrypted salt, so this device can fold in credentials and make proofs without ever asking again. Skip it and you'll still log in fine; you'll just be asked for these later, every time.