Same one PIN for the dashboard and for authorising money moves. Changing it needs the current one first — an open session alone isn't enough.