{
  "auth.changePassword.title": "Security & MFA",
  "security.admin.admin.sudo.actions.add": "Add rule",
  "security.admin.admin.sudo.challengeMethod.auto": "Auto",
  "security.admin.admin.sudo.challengeMethod.mfa": "MFA only",
  "security.admin.admin.sudo.challengeMethod.password": "Password",
  "security.admin.admin.sudo.delete.text": "This removes the selected sudo protection rule.",
  "security.admin.admin.sudo.delete.title": "Delete sudo rule?",
  "security.admin.admin.sudo.dialog.create": "Create sudo rule",
  "security.admin.admin.sudo.dialog.edit": "Edit sudo rule",
  "security.admin.admin.sudo.errors.load": "Failed to load sudo configuration.",
  "security.admin.admin.sudo.flash.cancelled": "Sudo challenge cancelled.",
  "security.admin.admin.sudo.flash.created": "Sudo configuration created.",
  "security.admin.admin.sudo.flash.deleteError": "Failed to delete sudo configuration.",
  "security.admin.admin.sudo.flash.deleted": "Sudo configuration deleted.",
  "security.admin.admin.sudo.flash.saveError": "Failed to save sudo configuration.",
  "security.admin.admin.sudo.flash.updated": "Sudo configuration updated.",
  "security.admin.admin.sudo.form.challengeMethod": "Challenge method",
  "security.admin.admin.sudo.form.errors.tenantRequired": "Tenant is required when organization is set.",
  "security.admin.admin.sudo.form.isEnabled": "Enabled",
  "security.admin.admin.sudo.form.organizationId": "Organization ID",
  "security.admin.admin.sudo.form.organizationIdPlaceholder": "Optional organization scope",
  "security.admin.admin.sudo.form.targetIdentifier": "Target identifier",
  "security.admin.admin.sudo.form.targetIdentifierPlaceholder": "security.sudo.manage",
  "security.admin.admin.sudo.form.tenantId": "Tenant ID",
  "security.admin.admin.sudo.form.tenantIdPlaceholder": "Optional tenant scope",
  "security.admin.admin.sudo.form.title": "Sudo rule",
  "security.admin.admin.sudo.form.ttlSeconds": "Token TTL (seconds)",
  "security.admin.admin.sudo.notice.description": "Use sudo rules to require a fresh password or MFA challenge for selected features, routes, modules, or packages.",
  "security.admin.admin.sudo.notice.title": "Sensitive operations require re-authentication",
  "security.admin.admin.sudo.scope.platform": "Platform",
  "security.admin.admin.sudo.source.admin": "Admin override",
  "security.admin.admin.sudo.source.developer": "Developer default",
  "security.admin.admin.sudo.status.disabled": "Disabled",
  "security.admin.admin.sudo.status.enabled": "Enabled",
  "security.admin.admin.sudo.table.actions": "Actions",
  "security.admin.admin.sudo.table.challengeMethod": "Method",
  "security.admin.admin.sudo.table.scope": "Scope",
  "security.admin.admin.sudo.table.source": "Source",
  "security.admin.admin.sudo.table.status": "Status",
  "security.admin.admin.sudo.table.targetIdentifier": "Target",
  "security.admin.admin.sudo.table.ttl": "TTL",
  "security.admin.admin.sudo.table.ttlValue": "{value}s",
  "security.admin.admin.sudo.title": "Sudo protection",
  "security.admin.audit.sudo.create": "Create sudo configuration",
  "security.admin.audit.sudo.delete": "Delete sudo configuration",
  "security.admin.audit.sudo.update": "Update sudo configuration",
  "security.admin.dashboard.cards.avgMethods": "Avg methods per enrolled user: {value}",
  "security.admin.dashboard.cards.policiesActive": "Active enforcement policies",
  "security.admin.dashboard.cards.policiesTotal": "Total policies: {count}",
  "security.admin.dashboard.cards.sudoSummary": "Sudo protection summary",
  "security.admin.dashboard.cards.usersEnrolled": "Users enrolled in MFA",
  "security.admin.dashboard.cards.usersOverdue": "Overdue users",
  "security.admin.dashboard.cards.usersPending": "Pending users: {count}",
  "security.admin.dashboard.description": "Track MFA adoption, enforcement activity, and administrative security posture.",
  "security.admin.dashboard.errors.load": "Failed to load security dashboard metrics.",
  "security.admin.dashboard.loading": "Loading security metrics...",
  "security.admin.dashboard.sudo.available": "Available",
  "security.admin.dashboard.sudo.availableHint": "Sudo endpoints are reachable.",
  "security.admin.dashboard.sudo.unavailable": "Not available",
  "security.admin.dashboard.sudo.unavailableHint": "Sudo metrics will appear after sudo APIs are implemented.",
  "security.admin.dashboard.title": "Security dashboard",
  "security.admin.enforcement.deadline.none": "No deadline",
  "security.admin.enforcement.delete.text": "This removes the selected policy. Continue?",
  "security.admin.enforcement.delete.title": "Delete enforcement policy?",
  "security.admin.enforcement.description": "Manage enforcement policies across platform, tenant, and organisation scopes.",
  "security.admin.enforcement.empty": "No enforcement policies found.",
  "security.admin.enforcement.errors.invalidId": "Invalid enforcement policy id.",
  "security.admin.enforcement.errors.load": "Failed to load enforcement policies.",
  "security.admin.enforcement.errors.notFound": "Enforcement policy not found.",
  "security.admin.enforcement.flash.createError": "Failed to create enforcement policy.",
  "security.admin.enforcement.flash.created": "Enforcement policy created.",
  "security.admin.enforcement.flash.deleteError": "Failed to delete enforcement policy.",
  "security.admin.enforcement.flash.deleted": "Enforcement policy deleted.",
  "security.admin.enforcement.flash.updateError": "Failed to update enforcement policy.",
  "security.admin.enforcement.flash.updated": "Enforcement policy updated.",
  "security.admin.enforcement.form.allowedMethods": "Allowed methods",
  "security.admin.enforcement.form.allowedMethodsAll": "Allow all methods",
  "security.admin.enforcement.form.allowedMethodsHint": "If no methods are selected, all available methods are allowed.",
  "security.admin.enforcement.form.allowedMethodsRestricted": "Restrict to selected methods",
  "security.admin.enforcement.form.create": "Create policy",
  "security.admin.enforcement.form.deadline": "Enforcement deadline",
  "security.admin.enforcement.form.enabled": "Policy enforced",
  "security.admin.enforcement.form.errors.organizationRequired": "Organization ID is required for organisation scope.",
  "security.admin.enforcement.form.errors.tenantRequired": "Tenant ID is required for tenant and organisation scopes.",
  "security.admin.enforcement.form.organization": "Organization",
  "security.admin.enforcement.form.organizationId": "Organization ID",
  "security.admin.enforcement.form.organizationIdPlaceholder": "Enter organization UUID",
  "security.admin.enforcement.form.organizationPlaceholder": "Select organization",
  "security.admin.enforcement.form.previewLoading": "Calculating affected users...",
  "security.admin.enforcement.form.previewTitle": "Affected users preview",
  "security.admin.enforcement.form.previewUnavailable": "Preview unavailable for the current scope selection.",
  "security.admin.enforcement.form.saveChanges": "Save changes",
  "security.admin.enforcement.form.scope": "Scope",
  "security.admin.enforcement.form.tenant": "Tenant",
  "security.admin.enforcement.form.tenantId": "Tenant ID",
  "security.admin.enforcement.form.tenantIdPlaceholder": "Enter tenant UUID",
  "security.admin.enforcement.form.tenantPlaceholder": "Select tenant",
  "security.admin.enforcement.form.titleCreate": "Create enforcement policy",
  "security.admin.enforcement.form.titleEdit": "Edit enforcement policy",
  "security.admin.enforcement.list.actions": "Actions",
  "security.admin.enforcement.list.deadline": "Deadline",
  "security.admin.enforcement.list.methods": "Allowed methods",
  "security.admin.enforcement.list.new": "Create new policy",
  "security.admin.enforcement.list.scope": "Scope",
  "security.admin.enforcement.list.status": "Status",
  "security.admin.enforcement.list.target": "Target",
  "security.admin.enforcement.list.title": "Existing policies",
  "security.admin.enforcement.loading": "Loading enforcement policies...",
  "security.admin.enforcement.methods.all": "All",
  "security.admin.enforcement.methods.otp_email": "Email OTP",
  "security.admin.enforcement.methods.passkey": "Passkey",
  "security.admin.enforcement.methods.totp": "Authenticator app (TOTP)",
  "security.admin.enforcement.preview.enrolled": "Enrolled",
  "security.admin.enforcement.preview.overdue": "Overdue",
  "security.admin.enforcement.preview.pending": "Pending",
  "security.admin.enforcement.preview.total": "Total",
  "security.admin.enforcement.scope.organisation": "Organisation",
  "security.admin.enforcement.scope.platform": "Platform",
  "security.admin.enforcement.scope.tenant": "Tenant",
  "security.admin.enforcement.search": "Search policies...",
  "security.admin.enforcement.status.disabled": "Disabled",
  "security.admin.enforcement.status.enforced": "Enforced",
  "security.admin.enforcement.target.platform": "All tenants",
  "security.admin.enforcement.title": "MFA enforcement",
  "security.admin.sudo.actions.add": "Add rule",
  "security.admin.sudo.challenge.actions.moreOptions": "Use another method",
  "security.admin.sudo.challenge.actions.verify": "Verify",
  "security.admin.sudo.challenge.description": "Re-authenticate to continue with this protected action.",
  "security.admin.sudo.challenge.errors.prepare": "Failed to prepare sudo challenge.",
  "security.admin.sudo.challenge.errors.verify": "Failed to verify sudo challenge.",
  "security.admin.sudo.challenge.noMethods": "No sudo authentication methods are available.",
  "security.admin.sudo.challenge.password.label": "Password",
  "security.admin.sudo.challenge.password.placeholder": "Enter your password",
  "security.admin.sudo.challenge.title": "Confirm sensitive action",
  "security.admin.sudo.challengeMethod.auto": "Auto",
  "security.admin.sudo.challengeMethod.mfa": "MFA only",
  "security.admin.sudo.challengeMethod.password": "Password",
  "security.admin.sudo.delete.text": "This removes the selected sudo protection rule.",
  "security.admin.sudo.delete.title": "Delete sudo rule?",
  "security.admin.sudo.errors.load": "Failed to load sudo configuration.",
  "security.admin.sudo.flash.cancelled": "Sudo challenge cancelled.",
  "security.admin.sudo.flash.created": "Sudo configuration created.",
  "security.admin.sudo.flash.deleteError": "Failed to delete sudo configuration.",
  "security.admin.sudo.flash.deleted": "Sudo configuration deleted.",
  "security.admin.sudo.flash.saveError": "Failed to save sudo configuration.",
  "security.admin.sudo.flash.updated": "Sudo configuration updated.",
  "security.admin.sudo.form.challengeMethod": "Challenge method",
  "security.admin.sudo.form.errors.tenantRequired": "Tenant is required when organization is set.",
  "security.admin.sudo.form.group.details": "Details",
  "security.admin.sudo.form.group.target": "Target",
  "security.admin.sudo.form.isEnabled": "Enabled",
  "security.admin.sudo.form.label": "Label (optional)",
  "security.admin.sudo.form.organizationId": "Organization ID",
  "security.admin.sudo.form.organizationIdPlaceholder": "Optional organization scope",
  "security.admin.sudo.form.organizationPlaceholder": "Any organization",
  "security.admin.sudo.form.targetIdentifier": "Target identifier",
  "security.admin.sudo.form.targetIdentifierPlaceholder": "security.sudo.manage",
  "security.admin.sudo.form.tenantId": "Tenant ID",
  "security.admin.sudo.form.tenantIdPlaceholder": "Optional tenant scope",
  "security.admin.sudo.form.tenantPlaceholder": "Any tenant (platform-wide)",
  "security.admin.sudo.form.title.create": "Create sudo rule",
  "security.admin.sudo.form.title.edit": "Edit sudo rule",
  "security.admin.sudo.form.ttlSeconds": "Token TTL (seconds)",
  "security.admin.sudo.loading": "Loading sudo configuration...",
  "security.admin.sudo.notice.description": "Use sudo rules to require a fresh password or MFA challenge for selected features, routes, modules, or packages.",
  "security.admin.sudo.notice.title": "Sensitive operations require re-authentication",
  "security.admin.sudo.scope.platform": "Platform",
  "security.admin.sudo.source.admin": "Admin override",
  "security.admin.sudo.source.developer": "Developer default",
  "security.admin.sudo.status.disabled": "Disabled",
  "security.admin.sudo.status.enabled": "Enabled",
  "security.admin.sudo.table.actions": "Actions",
  "security.admin.sudo.table.challengeMethod": "Method",
  "security.admin.sudo.table.label": "Label",
  "security.admin.sudo.table.scope": "Scope",
  "security.admin.sudo.table.source": "Source",
  "security.admin.sudo.table.status": "Status",
  "security.admin.sudo.table.targetIdentifier": "Target",
  "security.admin.sudo.table.ttl": "TTL",
  "security.admin.sudo.table.ttlValue": "{value}s",
  "security.admin.sudo.title": "Sudo protection",
  "security.admin.users.actions.resetMfa": "Reset MFA",
  "security.admin.users.actions.viewDetail": "View detail",
  "security.admin.users.compliance.enrolled": "Enrolled",
  "security.admin.users.compliance.overdue": "Overdue",
  "security.admin.users.compliance.pending": "Pending",
  "security.admin.users.description": "Review MFA compliance per user and reset enrolled methods when needed.",
  "security.admin.users.detail.backToUsers": "Back to users",
  "security.admin.users.detail.compliant": "Compliant",
  "security.admin.users.detail.enrolled": "Enrolled",
  "security.admin.users.detail.loading": "Loading user status...",
  "security.admin.users.detail.methodLabel": "Label",
  "security.admin.users.detail.methodLastUsed": "Last used",
  "security.admin.users.detail.methodType": "Type",
  "security.admin.users.detail.methods": "Methods",
  "security.admin.users.detail.noMethods": "No active methods.",
  "security.admin.users.detail.recoveryCodes": "Recovery codes remaining",
  "security.admin.users.detail.title": "User MFA detail",
  "security.admin.users.detail.unavailable": "Unable to load user details.",
  "security.admin.users.empty": "No users found for this tenant.",
  "security.admin.users.errors.invalidUserId": "Invalid user id.",
  "security.admin.users.errors.load": "Failed to load user compliance data.",
  "security.admin.users.errors.reasonRequired": "Reset reason is required.",
  "security.admin.users.errors.status": "Failed to load user MFA status.",
  "security.admin.users.flash.reset": "User MFA reset completed.",
  "security.admin.users.flash.resetError": "Failed to reset user MFA.",
  "security.admin.users.lastLogin.unknown": "No login recorded",
  "security.admin.users.loading": "Loading users...",
  "security.admin.users.mfa.disabled": "Not enrolled",
  "security.admin.users.mfa.enabled": "Enabled",
  "security.admin.users.reset.reason": "Reset reason",
  "security.admin.users.reset.reasonPlaceholder": "Enter reason for audit trail",
  "security.admin.users.search": "Search users...",
  "security.admin.users.table.actions": "Actions",
  "security.admin.users.table.compliance": "Compliance",
  "security.admin.users.table.email": "Email",
  "security.admin.users.table.lastLogin": "Last login",
  "security.admin.users.table.methodCount": "Method count",
  "security.admin.users.table.mfaStatus": "MFA status",
  "security.admin.users.table.title": "Users",
  "security.admin.users.table.user": "User",
  "security.admin.users.title": "User security management",
  "security.api.errors.adminIdRequired": "Admin ID is required.",
  "security.api.errors.challengeIdAndMethodTypeRequired": "challengeId and methodType are required.",
  "security.api.errors.codeRequired": "code is required.",
  "security.api.errors.crossTenantAccessDenied": "Cross-tenant access denied.",
  "security.api.errors.emailOtpDestinationMissing": "The email OTP method is missing a destination email address.",
  "security.api.errors.emailOtpDestinationRequired": "Unable to configure email OTP without a destination email address.",
  "security.api.errors.emailOtpSetupSessionExpired": "Email OTP setup session expired.",
  "security.api.errors.emailOtpSetupSessionNotFound": "Email OTP setup session not found.",
  "security.api.errors.enforcementInsufficientScope": "Insufficient scope for enforcement policy.",
  "security.api.errors.enforcementOrganizationScopeFormat": "Organisation scopeId must use '<tenantId>:<organizationId>' format.",
  "security.api.errors.enforcementOrganizationScopeIdsRequired": "tenantId and organizationId are required for organisation scope.",
  "security.api.errors.enforcementPolicyAlreadyExistsForScope": "An enforcement policy already exists for this scope.",
  "security.api.errors.enforcementPolicyNotFound": "Enforcement policy not found.",
  "security.api.errors.enforcementRequestFailed": "Failed to process enforcement request.",
  "security.api.errors.enforcementScopeIdRequired": "scopeId is required for tenant and organisation scopes.",
  "security.api.errors.enforcementTenantIdRequired": "tenantId is required for tenant scope.",
  "security.api.errors.invalidMethodId": "Invalid method id.",
  "security.api.errors.invalidMfaVerificationCode": "Invalid MFA verification code.",
  "security.api.errors.invalidPasskeySetupChallenge": "Invalid passkey setup challenge.",
  "security.api.errors.invalidPolicyId": "Invalid policy id.",
  "security.api.errors.invalidProviderType": "Invalid provider type.",
  "security.api.errors.invalidQueryParameters": "Invalid query parameters.",
  "security.api.errors.invalidRecoveryCode": "Invalid recovery code.",
  "security.api.errors.invalidRouteParameters": "Invalid route parameters.",
  "security.api.errors.invalidTotpCode": "Invalid TOTP code.",
  "security.api.errors.invalidTotpSecret": "Invalid TOTP secret.",
  "security.api.errors.invalidUserId": "Invalid user id.",
  "security.api.errors.mfaChallengeAlreadyVerified": "MFA challenge was already verified.",
  "security.api.errors.mfaChallengeExpired": "MFA challenge expired.",
  "security.api.errors.mfaChallengeNotFound": "MFA challenge not found.",
  "security.api.errors.mfaMethodByTypeNotFound": "MFA method \"{method}\" was not found.",
  "security.api.errors.mfaMethodNotFound": "MFA method not found.",
  "security.api.errors.mfaMethodOwnership": "The MFA method does not belong to this user.",
  "security.api.errors.mfaPendingTokenRequired": "MFA pending token is required.",
  "security.api.errors.mfaProviderAlreadyConfigured": "MFA provider \"{provider}\" is already configured.",
  "security.api.errors.mfaProviderNotRegistered": "MFA provider \"{provider}\" is not registered.",
  "security.api.errors.mfaRequestFailed": "Failed to process MFA request.",
  "security.api.errors.mfaSetupSessionNotFound": "MFA setup session not found.",
  "security.api.errors.mfaSetupSessionProviderMismatch": "MFA setup session does not match the requested provider.",
  "security.api.errors.noMfaMethodsConfigured": "No MFA methods configured.",
  "security.api.errors.noRegisteredMfaProviders": "No registered MFA providers are available for the configured methods.",
  "security.api.errors.notImplemented": "Not implemented.",
  "security.api.errors.passkeyCredentialNotConfigured": "The passkey credential is not configured.",
  "security.api.errors.passkeyRegistrationCredentialMissing": "Passkey registration did not return credential data.",
  "security.api.errors.passkeyRegistrationVerificationFailed": "Passkey registration verification failed.",
  "security.api.errors.passkeySetupSessionExpired": "Passkey setup session expired.",
  "security.api.errors.passkeySetupSessionNotFound": "Passkey setup session not found.",
  "security.api.errors.passwordRequired": "Password is required.",
  "security.api.errors.resetReasonRequired": "Reset reason is required.",
  "security.api.errors.setupIdRequired": "setupId is required.",
  "security.api.errors.sudoConfigurationAlreadyExists": "A sudo configuration for this target and scope already exists.",
  "security.api.errors.sudoConfigurationNotFound": "Sudo configuration not found.",
  "security.api.errors.sudoMfaRequiredButUnavailable": "This sudo target requires MFA, but no MFA methods are configured.",
  "security.api.errors.sudoOrganizationScopeRequiresTenant": "An organization-scoped sudo configuration requires a tenant.",
  "security.api.errors.sudoProtectionNotConfigured": "Sudo protection is not configured for this target.",
  "security.api.errors.sudoRequestFailed": "Failed to process sudo request.",
  "security.api.errors.sudoRequiredForTarget": "Sudo authentication is required for: {target}",
  "security.api.errors.sudoSessionDoesNotRequireMfa": "This sudo session does not require MFA.",
  "security.api.errors.sudoSessionExpired": "Sudo challenge session expired.",
  "security.api.errors.sudoSessionNotFound": "Sudo challenge session not found.",
  "security.api.errors.sudoVerifyFailed": "Unable to verify the sudo challenge.",
  "security.api.errors.tenantContextRequired": "Tenant context is required.",
  "security.api.errors.tenantIdRequired": "Tenant ID is required.",
  "security.api.errors.tenantNotFound": "Tenant not found.",
  "security.api.errors.totpSetupSessionExpired": "TOTP setup session expired.",
  "security.api.errors.totpSetupSessionNotFound": "TOTP setup session not found.",
  "security.api.errors.userIdRequired": "User ID is required.",
  "security.api.errors.userSecurityRequestFailed": "Failed to process user security request.",
  "security.audit.enforcement.create": "Create enforcement policy",
  "security.audit.enforcement.delete": "Delete enforcement policy",
  "security.audit.enforcement.update": "Update enforcement policy",
  "security.audit.mfa.method.remove": "Remove MFA method",
  "security.audit.mfa.reset": "Reset user MFA",
  "security.audit.password.change": "Change password",
  "security.audit.recovery.regenerate": "Regenerate recovery codes",
  "security.audit.sudo.create": "Create sudo configuration",
  "security.audit.sudo.delete": "Delete sudo configuration",
  "security.audit.sudo.update": "Update sudo configuration",
  "security.label": "Security",
  "security.login.mfaChallenge.actions.back": "Back to sign in",
  "security.login.mfaChallenge.actions.moreOptions": "More options",
  "security.login.mfaChallenge.actions.verify": "Verify",
  "security.login.mfaChallenge.description": "Complete MFA verification to finish signing in.",
  "security.login.mfaChallenge.noMethods": "No MFA methods are currently available for this account.",
  "security.login.mfaChallenge.otpEmail.codeLabel": "Verification code",
  "security.login.mfaChallenge.otpEmail.description": "Enter the 6-digit code sent to your email address.",
  "security.login.mfaChallenge.otpEmail.placeholder": "XXXXXX",
  "security.login.mfaChallenge.otpEmail.resend": "Resend code",
  "security.login.mfaChallenge.otpEmail.title": "Two-factor authentication",
  "security.login.mfaChallenge.passkey.action": "Verify with passkey",
  "security.login.mfaChallenge.passkey.description": "Use your passkey to verify this sign-in.",
  "security.login.mfaChallenge.passkey.title": "Passkey verification",
  "security.login.mfaChallenge.passkey.unsupported": "Passkeys are not supported by this browser.",
  "security.login.mfaChallenge.recovery.codeLabel": "Recovery code",
  "security.login.mfaChallenge.recovery.description": "Enter one of your recovery codes to complete sign in.",
  "security.login.mfaChallenge.recovery.option": "2FA recovery code",
  "security.login.mfaChallenge.recovery.placeholder": "XXXXXX-XXXXXX",
  "security.login.mfaChallenge.recovery.title": "Two-factor authentication",
  "security.login.mfaChallenge.title": "Multi-factor authentication required",
  "security.login.mfaChallenge.totp.codeLabel": "Verification code",
  "security.login.mfaChallenge.totp.description": "Enter the code from your two-factor authentication app or browser extension below.",
  "security.login.mfaChallenge.totp.placeholder": "XXXXXX",
  "security.login.mfaChallenge.totp.title": "Two-factor authentication",
  "security.menu.profile.securityMfa": "Security & MFA",
  "security.notifications.enforcementDeadline.bodyImmediate": "Your organization now requires MFA. Set up MFA immediately to keep account access.",
  "security.notifications.enforcementDeadline.bodyOverdue": "Your MFA enrollment deadline passed on {deadline}. Set up MFA immediately to keep account access.",
  "security.notifications.enforcementDeadline.bodyWithDeadline": "Your organization now requires MFA. Set it up within {days} day(s) before {deadline} to keep account access.",
  "security.notifications.enforcementDeadline.title": "MFA enrollment required",
  "security.notifications.mfaEnrolled.body": "{method} was enabled for your account.",
  "security.notifications.mfaEnrolled.title": "MFA method enabled",
  "security.notifications.mfaReset.body": "An administrator reset your MFA methods. Reason: {reason}",
  "security.notifications.mfaReset.title": "MFA methods were reset",
  "security.notifications.passwordChanged.body": "Your password for this account was updated.",
  "security.notifications.passwordChanged.title": "Password changed",
  "security.profile.backToList": "Back to security settings",
  "security.profile.mfa.backToList": "Back to MFA settings",
  "security.profile.mfa.description": "Manage your MFA methods and recovery codes.",
  "security.profile.mfa.enforcement.notice.dismiss": "Dismiss",
  "security.profile.mfa.enforcement.notice.overdueText": "Your MFA enrollment deadline has passed. Set up MFA now to keep account access.",
  "security.profile.mfa.enforcement.notice.text": "Your organization requires MFA enrollment. Set up at least one method to continue securely.",
  "security.profile.mfa.enforcement.notice.title": "MFA enrollment required",
  "security.profile.mfa.enrolled.empty": "No MFA methods enabled yet.",
  "security.profile.mfa.enrolled.title": "Enrolled methods",
  "security.profile.mfa.generic.clientData": "Setup response data",
  "security.profile.mfa.generic.confirm": "Confirm setup",
  "security.profile.mfa.generic.payload": "Setup payload (JSON)",
  "security.profile.mfa.generic.restart": "Restart",
  "security.profile.mfa.generic.setupComplete": "MFA method enabled.",
  "security.profile.mfa.generic.setupStarted": "Provider setup started.",
  "security.profile.mfa.generic.setupTitle": "Configure {provider}",
  "security.profile.mfa.generic.start": "Start setup",
  "security.profile.mfa.generic.verifyCode": "Verification code (if required)",
  "security.profile.mfa.generic.verifyCodePlaceholder": "Enter verification code",
  "security.profile.mfa.loading": "Loading MFA settings...",
  "security.profile.mfa.manage": "Manage MFA settings",
  "security.profile.mfa.method.active": "Active",
  "security.profile.mfa.method.lastUsed": "Last used",
  "security.profile.mfa.method.neverUsed": "Never used",
  "security.profile.mfa.method.remove": "Remove",
  "security.profile.mfa.method.type": "Type",
  "security.profile.mfa.method.unknownTime": "Unknown",
  "security.profile.mfa.methods.description": "Manage your MFA methods for this provider.",
  "security.profile.mfa.passkey.authenticator": "Authenticator type",
  "security.profile.mfa.passkey.crossPlatform": "Security key",
  "security.profile.mfa.passkey.description": "Security keys are WebAuthn credentials that can only be used as a second factor of authentication.",
  "security.profile.mfa.passkey.label": "Label",
  "security.profile.mfa.passkey.nicknamePlaceholder": "Enter a nickname for this security key",
  "security.profile.mfa.passkey.platform": "This device",
  "security.profile.mfa.passkey.ready": "Passkey registration options are ready.",
  "security.profile.mfa.passkey.register": "Register passkey",
  "security.profile.mfa.passkey.start": "Start setup",
  "security.profile.mfa.passkey.success": "Passkey enabled.",
  "security.profile.mfa.passkey.title": "Passkey setup",
  "security.profile.mfa.passkey.unsupported": "Passkeys are not supported by this browser.",
  "security.profile.mfa.providers.configuredMany": "{count} configured methods",
  "security.profile.mfa.providers.configuredSingle": "1 configured method",
  "security.profile.mfa.providers.description": "Open a provider to manage configured methods.",
  "security.profile.mfa.providers.empty": "No MFA providers are currently available.",
  "security.profile.mfa.providers.generic.notConfigured": "Not configured yet.",
  "security.profile.mfa.providers.otpEmail.description": "Receive one-time verification codes by email when signing in.",
  "security.profile.mfa.providers.otpEmail.emailLabel": "Email address (optional)",
  "security.profile.mfa.providers.otpEmail.emailPlaceholder": "Use your account email",
  "security.profile.mfa.providers.otpEmail.enabled": "Email OTP enabled.",
  "security.profile.mfa.providers.otpEmail.labelLabel": "Label (optional)",
  "security.profile.mfa.providers.otpEmail.labelPlaceholder": "Email OTP",
  "security.profile.mfa.providers.otpEmail.title": "Email OTP",
  "security.profile.mfa.providers.otpEnabled": "Email OTP enabled.",
  "security.profile.mfa.providers.passkey.description": "Security keys are WebAuthn credentials that can only be used as a second factor of authentication.",
  "security.profile.mfa.providers.passkey.keyMany": "{count} keys",
  "security.profile.mfa.providers.passkey.keySingle": "1 key",
  "security.profile.mfa.providers.passkey.title": "Security keys",
  "security.profile.mfa.providers.recovery.description": "Use backup recovery codes as a last resort when you cannot access your primary MFA methods.",
  "security.profile.mfa.providers.recovery.title": "Recovery codes",
  "security.profile.mfa.providers.setupGeneric": "Set up provider",
  "security.profile.mfa.providers.setupOtpEmail": "Enable email OTP",
  "security.profile.mfa.providers.setupPasskey": "Set up passkey",
  "security.profile.mfa.providers.setupTotp": "Set up TOTP",
  "security.profile.mfa.providers.tableColumn": "Methods",
  "security.profile.mfa.providers.title": "Method types",
  "security.profile.mfa.providers.totp.configured": "Configured",
  "security.profile.mfa.providers.totp.description": "Use an authenticator app or browser extension to get two-factor authentication codes when prompted.",
  "security.profile.mfa.providers.totp.title": "Authenticator app",
  "security.profile.mfa.recovery.copy": "Copy all",
  "security.profile.mfa.recovery.copyAction": "Copy",
  "security.profile.mfa.recovery.copyError": "Unable to copy recovery codes.",
  "security.profile.mfa.recovery.copySuccess": "Recovery codes copied.",
  "security.profile.mfa.recovery.download": "Download .txt",
  "security.profile.mfa.recovery.downloadAction": "Download",
  "security.profile.mfa.recovery.emptyState": "Generate a new set of recovery codes to view and save them.",
  "security.profile.mfa.recovery.generateDescription": "When you generate new recovery codes, your old codes won't work anymore.",
  "security.profile.mfa.recovery.generateTitle": "Generate new recovery codes",
  "security.profile.mfa.recovery.pageDescription": "Recovery codes can be used to access your account in the event you lose access to your device and cannot receive two-factor authentication codes.",
  "security.profile.mfa.recovery.pageTitle": "Two-factor recovery codes",
  "security.profile.mfa.recovery.print": "Print",
  "security.profile.mfa.recovery.regenerate": "Regenerate codes",
  "security.profile.mfa.recovery.regenerated": "Recovery codes regenerated.",
  "security.profile.mfa.recovery.sectionTitle": "Recovery codes",
  "security.profile.mfa.recovery.storageHint": "Keep your recovery codes as safe as your password. We recommend saving them with a password manager such as 1Password, Authy, or Keeper.",
  "security.profile.mfa.recovery.title": "Recovery codes",
  "security.profile.mfa.recovery.warning": "Store these codes in a safe place. You will not be able to view them again.",
  "security.profile.mfa.recovery.warningStrong": "Keep your recovery codes in a safe spot. These codes are the last resort for accessing your account in case you lose your password and second factors. If you cannot find these codes, you will lose access to your account.",
  "security.profile.mfa.remove.success": "MFA method removed.",
  "security.profile.mfa.remove.text": "This removes the selected MFA method. Continue?",
  "security.profile.mfa.remove.title": "Remove MFA method?",
  "security.profile.mfa.setupMfa.loading": "Loading MFA provider setup...",
  "security.profile.mfa.setupMfa.missingProvider": "Missing MFA provider type.",
  "security.profile.mfa.setupMfa.providerUnavailable": "The selected MFA provider is not available.",
  "security.profile.mfa.setupMfa.title": "MFA provider setup",
  "security.profile.mfa.title": "Multi-factor authentication",
  "security.profile.mfa.totp.codePlaceholder": "Enter 6-digit code",
  "security.profile.mfa.totp.confirm": "Confirm TOTP",
  "security.profile.mfa.totp.confirmError": "Failed to enable authenticator app.",
  "security.profile.mfa.totp.confirmSuccess": "TOTP method enabled.",
  "security.profile.mfa.totp.description": "Use an authenticator app on your phone to scan a QR code and generate one-time login codes.",
  "security.profile.mfa.totp.hideManual": "Hide manual setup",
  "security.profile.mfa.totp.loadingQr": "Preparing QR code...",
  "security.profile.mfa.totp.loadingQrFallback": "QR code unavailable",
  "security.profile.mfa.totp.manualHint": "Unable to scan? You can use a setup key to configure your authenticator app.",
  "security.profile.mfa.totp.qrAlt": "TOTP QR code",
  "security.profile.mfa.totp.restart": "Generate a new QR",
  "security.profile.mfa.totp.scanInstructions": "Open your authenticator app and scan this QR code.",
  "security.profile.mfa.totp.scanTitle": "Scan the QR code",
  "security.profile.mfa.totp.scenarioText": "Example: A warehouse manager logs in from a shared workstation and confirms sign-in using a 6-digit code from their phone authenticator app.",
  "security.profile.mfa.totp.scenarioTitle": "Real-world scenario",
  "security.profile.mfa.totp.secret": "Manual secret",
  "security.profile.mfa.totp.setupError": "Failed to prepare authenticator setup.",
  "security.profile.mfa.totp.showManual": "Use manual setup instead",
  "security.profile.mfa.totp.start": "Start setup",
  "security.profile.mfa.totp.steps.recovery": "3. Save recovery codes",
  "security.profile.mfa.totp.steps.setup": "1. Scan QR code",
  "security.profile.mfa.totp.steps.verify": "2. Verify code",
  "security.profile.mfa.totp.title": "TOTP setup",
  "security.profile.mfa.totp.uri": "Provisioning URI",
  "security.profile.mfa.totp.verifyTitle": "Verify the code from the app",
  "security.profile.mfa.verify.codePlaceholder": "Enter verification code",
  "security.profile.mfa.verify.resend": "Resend code",
  "security.profile.mfa.verify.submit": "Verify",
  "security.profile.pageTitle": "Security & MFA",
  "security.profile.password.description": "Change your account password and keep your credentials secure.",
  "security.profile.password.form.confirmPassword": "Confirm new password",
  "security.profile.password.form.currentPassword": "Current password",
  "security.profile.password.form.errors.confirmRequired": "Please confirm the new password.",
  "security.profile.password.form.errors.currentRequired": "Current password is required.",
  "security.profile.password.form.errors.passwordMismatch": "Passwords do not match.",
  "security.profile.password.form.errors.passwordPolicy": "Password does not meet the requirements.",
  "security.profile.password.form.errors.required": "Both current and new password are required.",
  "security.profile.password.form.errors.save": "Failed to update password.",
  "security.profile.password.form.errors.useSecurityPage": "Password changes must be made from the Security & MFA page.",
  "security.profile.password.form.newPassword": "New password",
  "security.profile.password.form.requirementsTitle": "Password requirements",
  "security.profile.password.form.submit": "Update password",
  "security.profile.password.form.success": "Password updated.",
  "security.profile.password.form.title": "Change password",
  "security.profile.password.title": "Password security",
  "ui.actions.add": "Add",
  "ui.actions.back": "Back",
  "ui.actions.create": "Create",
  "ui.actions.retry": "Retry",
  "ui.common.no": "No",
  "ui.common.yes": "Yes",
  "ui.filters.all": "All",
  "ui.profileMenu.changePassword": "Security & MFA",
  "ui.table.registeredAt": "Registered"
}
