# `Ory.Model.ContinueWithDeviceAuthnPinEntryUi`

Returned after a PIN-protected DeviceAuthn enrollment or secret rotation. It carries the one-time HPKE-sealed pin_secret, which the device opens with the transport private key it generated for this enrollment and binds to the user's PIN. The plaintext secret never leaves the device; the server only ever stores its at-rest ciphertext.  The enrolled key's client_key_id is not included: it is the SHA-256 fingerprint of the device's own public key, which the device derives locally. Non-PIN keys need no client action at all and therefore produce no continue_with.

# `t`

```elixir
@type t() :: %Ory.Model.ContinueWithDeviceAuthnPinEntryUi{
  action: String.t(),
  data: Ory.Model.ContinueWithDeviceAuthnPinEntryUiData.t()
}
```

# `decode`

---

*Consult [api-reference.md](api-reference.md) for complete listing*