diff --git a/index.html b/index.html
index efe6131..93b03da 100644
--- a/index.html
+++ b/index.html
@@ -102,7 +102,7 @@
   .ctl b{color:var(--acc)}
   @media (max-width:720px){ .flow{grid-template-columns:1fr} .flow .arr{transform:rotate(90deg);text-align:center} }
 
-  ol.steps{counter-reset:s;list-style:none;padding:0;margin:0;display:grid;gap:12px}
+  ol.steps{counter-reset:s;list-style:none;padding:0;margin:0;display:grid;grid-template-columns:minmax(0,1fr);gap:12px}
   ol.steps li{counter-increment:s;background:var(--panel);border:1px solid var(--line);border-radius:12px;padding:1rem 1.2rem 1rem 3.4rem;position:relative}
   ol.steps li::before{content:counter(s);position:absolute;left:1.1rem;top:1rem;width:1.6rem;height:1.6rem;border-radius:50%;
        background:rgba(61,220,151,.14);color:var(--acc);display:grid;place-items:center;font-weight:700;font-size:.9rem}
@@ -162,7 +162,7 @@
   <div class="shot" aria-hidden="true">
     <div class="bar"><i></i><i></i><i></i></div>
     <div class="body">
-      <nav><span class="on">Overview</span><span>Buckets</span><span>Users &amp; keys</span><span>Sia connection</span><span>Settings</span><span>Logs</span></nav>
+      <nav><span>Get started</span><span class="on">Overview</span><span>Buckets</span><span>Users &amp; keys</span><span>Sia connection</span><span>Settings</span><span>Logs</span></nav>
       <div class="main">
         <div class="pill">s3d running</div>
         <h3>Upload pipeline</h3>
@@ -184,7 +184,8 @@
     <h2>Everything s3d does, on one screen</h2>
     <p class="lead">s3d is a great piece of plumbing that you drive with a CLI and config files. Pithos keeps the plumbing and gives you the controls.</p>
     <div class="grid">
-      <div class="card"><div class="ic">🔗</div><h3>Connect to Sia</h3><p>Register with sia.storage or your own indexer using your recovery phrase, or generate a new one. You approve the connection in your browser; the phrase never leaves your machine.</p></div>
+      <div class="card"><div class="ic">🔗</div><h3>Guided setup</h3><p>A step-by-step guide takes you from a free Sia Storage account to a working S3 key. Pithos opens the approval page for you and carries on by itself the moment you approve.</p></div>
+      <div class="card"><div class="ic">🔒</div><h3>Locked with your PIN</h3><p>In Theseus, Pithos opens with your vault PIN. Three wrong tries and Theseus asks for your master password instead. Lock the vault and Pithos locks with it.</p></div>
       <div class="card"><div class="ic">🔑</div><h3>Users &amp; access keys</h3><p>Create a user per app or person. Issue and revoke keys, and copy ready-made config for the aws CLI, rclone or environment variables.</p></div>
       <div class="card"><div class="ic">🗂️</div><h3>Buckets &amp; files</h3><p>Browse any user's buckets, drag files in, download them, delete folders, and make a bucket public-read when you want to serve files.</p></div>
       <div class="card"><div class="ic">📤</div><h3>Share links</h3><p>Signed links that work without a key and expire after an hour, a day or a week.</p></div>
@@ -217,8 +218,8 @@
     <div class="grid">
       <div class="card">
         <div class="ic">🧭</div><h3>In Theseus Navigator</h3>
-        <p>Built into the Theseus browser as an extension. Open it from the dock and it runs in a tab. Nothing extra to install.</p>
-        <span class="status ok">Built into Theseus 0.3.72</span> <a class="status ok" style="text-decoration:none" href="https://dl.silentmode.st/latest/TheseusNavigator-Setup.exe">Download Theseus</a>
+        <p>Built into the Theseus browser. It lives in the left sidebar beside your quick links, opens with your vault PIN, and widens to full window when you need room.</p>
+        <span class="status ok">Built into Theseus 0.3.74</span> <a class="status ok" style="text-decoration:none" href="https://dl.silentmode.st/latest/TheseusNavigator-Setup.exe">Download Theseus</a>
       </div>
       <div class="card">
         <div class="ic">🖥️</div><h3>Desktop app</h3>
@@ -236,12 +237,13 @@
 
 <section id="start">
   <div class="wrap">
-    <h2>From zero to S3 in four steps</h2>
-    <p class="lead">You need a <a href="https://sia.storage">sia.storage</a> account (or your own indexer). Pithos walks you through the rest.</p>
+    <h2>From zero to S3 in five steps</h2>
+    <p class="lead">Open Pithos and press <b>Get started</b>. The guide walks you through every step with Back and Next.</p>
     <ol class="steps">
+      <li><b>Create a free Sia Storage account</b><span>Sign up at <a href="https://sia.storage">sia.storage</a>: 50 GB free. You sign up with Sia Storage directly; Pithos never sees that password. Or use your own indexer.</span></li>
       <li><b>Install s3d</b><span>Pithos downloads the official s3d release from the Sia Foundation and checks its SHA-256 before using it.</span></li>
-      <li><b>Connect to Sia</b><span>Enter your recovery phrase or create a new one, then approve the connection on the indexer's page.</span></li>
-      <li><b>Create a user</b><span>Pithos makes the first access key with it and shows ready-to-paste client config.</span></li>
+      <li><b>Choose your recovery phrase</b><span>In Theseus, let Pithos take it from your password vault: nothing to write down, and your vault backup restores your storage. Or create one and write it down.</span></li>
+      <li><b>Approve Pithos</b><span>The approval page opens by itself. Approve the app on Sia Storage and Pithos starts your gateway and creates your first access key.</span></li>
       <li><b>Point your tools at it</b><span>Anything that speaks S3 now stores on Sia.</span>
 <pre><code>aws --profile backups --endpoint-url http://127.0.0.1:8000 s3 cp ./photos s3://family/ --recursive</code></pre></li>
     </ol>
@@ -253,7 +255,8 @@
     <h2>Built to be boring about security</h2>
     <p class="lead">A storage control panel holds the keys to your data, so Pithos is strict by default.</p>
     <ul class="checks">
-      <li><b>Your recovery phrase stays local.</b> It goes straight to the s3d process on your machine and is never stored, logged or uploaded.</li>
+      <li><b>Your recovery phrase stays local.</b> It goes straight to the s3d process on your machine and is never stored, logged or uploaded. Taken from your Theseus vault, it is built inside Pithos and never shown on screen.</li>
+      <li><b>PIN-locked in Theseus.</b> Theseus asks for the PIN in its own prompt, so Pithos never sees it or your master password. Three wrong PINs require the master password.</li>
       <li><b>Loopback only by default.</b> The control panel listens on 127.0.0.1 and rejects requests that arrive under any other host name.</li>
       <li><b>One-time sign-in.</b> Theseus and the desktop app open the panel with a single-use secret that becomes a strict, HttpOnly session cookie.</li>
       <li><b>No cross-site tricks.</b> Every change needs a custom header that other websites cannot send.</li>
@@ -270,6 +273,7 @@
     <details class="faq"><summary>What does it cost?</summary><p>Pithos is free and open source. Storage is billed by your Sia indexer, for example sia.storage.</p></details>
     <details class="faq"><summary>Which s3d version do I need?</summary><p>v0.2.0 or newer. Pithos offers to install the right one for you and tells you when yours is too old.</p></details>
     <details class="faq"><summary>I already run s3d as a service. Can Pithos manage it?</summary><p>Yes. Pithos uses the same config file a hand-run s3d uses. If s3d is already running, Pithos shows it as external, reads its stats and leaves the process alone.</p></details>
+    <details class="faq"><summary>What if I forget my PIN?</summary><p>After three wrong tries Theseus asks for your master password, which always works. You can set a new PIN any time in Theseus Settings › Passwords.</p></details>
     <details class="faq"><summary>Is there a size limit?</summary><p>Uploads from the Pithos window are capped at 5 GiB per file for now. S3 clients such as aws and rclone use multipart uploads and go well beyond that.</p></details>
     <details class="faq"><summary>Why the name?</summary><p>A pithos was the great storage jar of the ancient Greek world, where a household kept what it could not afford to lose.</p></details>
   </div>