A dedicated place to check and (re)grant this — not a one-time popup that's easy to dismiss by accident. This has to be sitting at "Granted" before a 3rd+ wrong PIN attempt can actually capture anything.
Checking current status…
This browser has already blocked it once — clicking the button above won't show a prompt this time, browsers don't re-ask after an explicit "block." To fix it:
Click the padlock/site-info icon in the address bar
Find "Camera" in the site permissions
Set it to "Allow"
Come back here and click "Grant camera access" again to confirm it registered
Why this exists: the 3rd+ wrong-PIN-attempt covert capture only works if permission was already granted before that moment — it deliberately never shows a prompt during a real attempt, since that would tip off whoever's guessing the PIN. If it's not granted ahead of time, the capture silently fails — which still doesn't block the PIN/lockout ladder itself, but it does mean no photo, just a logged anomaly.