Three PINs.

One gives stored records (including auto-typing) and 2FA.

One gives a second bank of records et al.

The third is a duress key which wipes the device.

Also, you can reflash your data to it from an encrypted backup in case you do use the duress PIN or lose the device.

I think it's pretty cool to put the key in, type an eight digit code, then press a button to type my Amazon/GMail login page into a browser bar, enter username, enter password, wait for the page to load, then enter the 2FA. All automatically.

Big love for this thing I wear as a dogtag 24/7.