Secure access — passwords are hashed and sessions use signed JWT tokens.
Forgot password? Use recovery questions
Passwords are never stored in plain text and are checked against strength rules. Back home