Forgot password?
Passwords are bcrypt-hashed; accounts lock after 5 failed attempts. Every query is row-level-security scoped to your role, so you only ever see the data you need.