Security, Privacy & Access — centralized authentication. Passwords are hashed. MFA is required for Owner and Administrator when enabled.