Paste the app's /exec link (the same one the phone opens, without ?m=1). Kept on this phone only.
Enter the 6-digit phone access code. It signs in, reads the active bills (count only), then signs out again. A wrong code counts as a wrong try.
Creates a test passkey on this phone and unlocks with it. Also checks if Face ID can lock the saved data (needed for the real app).