A touch-first numeric keypad for PIN entry: 44px keys, masked dot indicator, deterministic shuffled layout, keyboard parity, and pending/error states.