A client's new site, behind a password, at its own address under preview.my-empower.au until it moves to the client's domain. Share the address and the password with the client.
Face ID or Touch ID
With a device here, sign-in asks for Face ID or Touch ID after your password. A code from your authenticator app still works if the device is not at hand.