I'm going to use GitHub 2-factor authentication as an example here. When enabling 2fa, the final step is for you to enter a valid token to ensure you have it configured and the device is working. The app should have the same, but with an unlock tag.
Before the locking mechanism can be enabled the user must scan their ring so the application can confirm they have a working tag.
If there is no working tag it will bail out and instruct them to register a new tag.
I'm going to use GitHub 2-factor authentication as an example here. When enabling 2fa, the final step is for you to enter a valid token to ensure you have it configured and the device is working. The app should have the same, but with an unlock tag.
Before the locking mechanism can be enabled the user must scan their ring so the application can confirm they have a working tag.
If there is no working tag it will bail out and instruct them to register a new tag.