update docs

docs/thijooree/faq/totpseed/01-setup-bml.md

@@ -1,8 +1,75 @@
-# How to reset OTP Seed
+# Set up BML
 
-| 1. Open profile | 2. Authenticator Setup | 3. Reset Authenticator | 4. Verify debit card |
-|---|---|---|---|
-| ![Open profile](screenshots/bml_1.jpg) | ![Authenticator Setup](screenshots/bml_2.jpg) | ![Reset Authenticator](screenshots/bml_3.jpg) | ![Verify debit card](screenshots/bml_4.jpg) |
-| 5. Copy secret key | 6. Paste OTP seed in Thijooree and Copy OTP from Thijooree | 7. Paste OTP in BML and click Verify Code |
-| ![Copy secret key](screenshots/bml_5.jpg) | ![Paste OTP seed in Thijooree and Copy OTP from Thijooree](screenshots/thijooree_1.jpg) | ![Paste OTP in BML and click Verify Code](screenshots/bml_6.jpg) |
-| ![All done](screenshots/bml_7.jpg) |
+Reset your Bank of Maldives authenticator to get a new OTP seed, then add that seed to Thijooree so it can generate your OTP codes.
+
+> [!NOTE]
+> You need the BML app signed in, and a BML debit card with its expiry date and CVC to confirm who you are.
+
+<table>
+  <tr>
+    <th width="25%">Step 1</th>
+    <th width="25%">Step 2</th>
+    <th width="25%">Step 3</th>
+    <th width="25%">Step 4</th>
+  </tr>
+  <tr>
+    <td align="center"><img src="screenshots/bml_1.jpg" alt="BML app wallet screen with the profile icon highlighted" width="200"></td>
+    <td align="center"><img src="screenshots/bml_2.jpg" alt="Profile menu with Authenticator Setup highlighted" width="200"></td>
+    <td align="center"><img src="screenshots/bml_3.jpg" alt="Channel Settings screen with the Reset Authenticator button highlighted" width="200"></td>
+    <td align="center"><img src="screenshots/bml_4.jpg" alt="Debit card verification form with the Authorize button highlighted" width="200"></td>
+  </tr>
+  <tr>
+    <td valign="top">
+      <b>Open your profile</b><br>
+      In the BML app, tap the <b>profile icon</b> in the top-right corner of the Wallet screen.
+    </td>
+    <td valign="top">
+      <b>Open Authenticator Setup</b><br>
+      In the menu, under <b>Settings</b>, tap <b>Authenticator Setup</b>.
+    </td>
+    <td valign="top">
+      <b>Reset the authenticator</b><br>
+      On the <b>Security</b> tab, tap <b>Reset Authenticator</b>. This replaces any authenticator app you used before.
+    </td>
+    <td valign="top">
+      <b>Verify your debit card</b><br>
+      Pick a debit card, enter its expiry month, expiry year and CVC, then tap <b>Authorize</b>.
+    </td>
+  </tr>
+  <tr>
+    <th>Step 5</th>
+    <th>Step 6</th>
+    <th>Step 7</th>
+    <th>Done</th>
+  </tr>
+  <tr>
+    <td align="center"><img src="screenshots/bml_5.jpg" alt="QR code screen with the copy button next to the secret key highlighted" width="200"></td>
+    <td align="center"><img src="screenshots/thijooree_1.jpg" alt="Thijooree sign-in screen with the OTP seed filled in and the current OTP shown" width="200"></td>
+    <td align="center"><img src="screenshots/bml_6.jpg" alt="BML screen with the OTP entered and the Verify Code button highlighted" width="200"></td>
+    <td align="center"><img src="screenshots/bml_7.jpg" alt="Authenticator reset successfully message" width="200"></td>
+  </tr>
+  <tr>
+    <td valign="top">
+      <b>Copy the secret key</b><br>
+      Below the QR code, tap the <b>copy button</b> next to the secret key. Keep this screen open, you will come back to it.
+    </td>
+    <td valign="top">
+      <b>Add the seed to Thijooree</b><br>
+      Open Thijooree and paste the key into <b>OTP Seed (TOTP Secret)</b>. Tap the <b>Current OTP</b> box to copy the 6-digit code.
+    </td>
+    <td valign="top">
+      <b>Verify the code in BML</b><br>
+      Go back to the BML app, paste the code into the 6-digit code field and tap <b>Verify Code</b>.
+    </td>
+    <td valign="top">
+      <b>All done</b><br>
+      BML shows <b>Authenticator reset successfully</b>. Thijooree now generates your BML OTP codes.
+    </td>
+  </tr>
+</table>
+
+> [!TIP]
+> The OTP changes every 30 seconds. If BML rejects the code, copy the current one from Thijooree again and verify straight away.
+
+> [!WARNING]
+> The secret key gives full access to your OTP codes. Don't share it or screenshot it where others can see it.