docs: 4-digit PIN, the offline-guessing limit, Manage needs Apply

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 9 insertions, 5 deletions

diff --git a/docs/YOUR_STEPS.md b/docs/YOUR_STEPS.md
index 679b139..f9fb267 100644
--- a/docs/YOUR_STEPS.md
+++ b/docs/YOUR_STEPS.md
@@ -37,7 +37,7 @@ Total time: about 2.5 to 3 hours, which can be split across days at any part bou
 | --- | --- |
 | Test secret A | `JBSWY3DPEHPK3PXP` |
 | Test secret B | `GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ` |
-| Test PIN | `135790` (any 6 digits you don't use elsewhere) |
+| Test PIN | `1357` (any 4 digits you don't use elsewhere) |
 | Test EAN-13 | `5901234123457` |
 
 Two `otpauth://` links for the import test (fake accounts, secret A and B):
@@ -141,7 +141,7 @@ While a card is open: the screen should go to full brightness (the Forerunner 70
 
 ### 4.5 Remove the debug build
 
-1. On the watch, remove OTP Wallet: highlight it in the apps list, hold UP (MENU) and choose **Remove**, or find it under **Settings**, **Activities & Apps** (or **Apps**). The exact labels on the Forerunner 70 may differ.
+1. On the watch, remove OTP Wallet: highlight it in the apps list, hold UP (MENU) and choose **Remove**. This worked on the Forerunner 70 (2026-10-21). If the apps list has no such option, look under **Settings**, **Activities & Apps** (or **Apps**).
 2. Connect the watch over USB and delete its leftover storage: `fr70.DAT`, `fr70.IDX` and `fr70.IMT` in `GARMIN/APPS/DATA`, and `fr70.SET` in `GARMIN/APPS/SETTINGS`. Leave every other file alone: files with 8-character names such as `G7AA3237.*` belong to apps installed from the Store (Settings Spike and others).
 3. Eject, unplug, and check that OTP Wallet is gone from the apps list.
 
@@ -204,6 +204,8 @@ Keep OTP Wallet open on the watch while you save forms, unless a step says other
 
 The entry IDs are in the About group on the phone, or in **Entry IDs** on the watch menu.
 
+For every Manage entry change: fill in the entry ID and the action, then turn on **Apply** and save. Without Apply the watch ignores the form.
+
 1. Rename `TestTwo` to `Renamed`.
 2. Move `Renamed` to position 1.
 3. Delete `Renamed`.
@@ -211,9 +213,11 @@ The entry IDs are in the About group on the phone, or in **Entry IDs** on the wa
 
 ### 6.6 Locked entry changes need the PIN
 
-1. With Manage entry, set **Require PIN** on `TestOne`. Save.
-2. Then send **Don't require PIN** for `TestOne`. The watch must **not** apply it by itself.
-3. On the watch: menu, **Phone changes**, **Confirm all**, enter the PIN. Now it applies.
+1. Close OTP Wallet on the watch and start it again, so the PIN isn't entered yet. With Manage entry, action **Require PIN** on `TestOne`, **Apply** on, save. The Result says "Locks when you next enter your PIN on the watch".
+2. On the watch, open `TestLocked` and enter the PIN. `TestOne` now requires the PIN too (it shows the lock mark; reopen the app to check that it asks for the PIN).
+3. While the PIN is still entered, a Require PIN applies at once: try it on another entry if you like.
+4. Then send **Don't require PIN** for `TestOne`. The watch must **not** apply it by itself, even while the PIN is entered.
+5. On the watch: menu, **Phone changes**, **Confirm all**, enter the PIN. Now it applies.
 
 ### 6.7 Options