Plug the device into a USB-C port, press and hold its button for one second (the drive disappears and it returns as a serial device), then press Connect device. Uses WebSerial (Chrome/Edge). The device verifies the update's signature itself before installing — the update cannot proceed if it is tampered with.