{{-- Every action is re-checked server-side against a recent password
confirmation — hiding the buttons stops nobody who can post to
/livewire/update. --}}
{{ $twoFactorOn ? __('two_factor_setup.state_on') : __('two_factor_setup.state_off') }}
@if (! $passwordConfirmed)
{{-- The gate. A signed-in session is not enough to change how the
account is protected — the risk is an unlocked machine. --}}
@elseif ($twoFactorOn)
@else
{{ __('two_factor_setup.enable') }}
@endif
@if ($recoveryCodes)
{{-- Shown once, on purpose: nobody writes down what they were never
shown, and these are the way back in when the phone is gone. --}}