Protected by industry-standard cryptography · Passwords are hashed server-side.