PIN has to be a 4-digit code

PIN is an extra safety measure associated with specific user and browser as long, as the browser remembers this user's login data.

When a bad PIN is provided, user's login data is immediately removed from specific browser - but it's still possible to log in with username and password.