Access is protected. Password is stored as a hash — no plaintext saved.