Pairing links a device to your account, so the engine has to know who you are before it can do it. Sign in, and you will come straight back here.
Your password is never typed into the plugin. The engine issues the device its own credential, which you can revoke at any time.
Your plugin is showing an eight-character code. Type it here to link that device to your account, so the engine knows whose device is asking.
This is what the code belongs to. If it does not match the plugin in front of you, stop.
You can go back to the plugin — it picks this up on its own within a few seconds.
Pairing never asks for your password here. The engine issues this device its own credential, which you can revoke at any time from My devices.
Anyone enrolled can invite anyone else. They get a single-use link that expires after seven days, and they choose their own password when they open it.
Inviting an address that already has an account does not create a second one — it replaces that person's password. That is also how a forgotten password is dealt with: there is no reset link, you ask for a new invitation.