Enter your ADMIN_PHONE to verify identity. New password is stored as a hash in data/auth.json — no plaintext.