Your sign-in is protected with the same care we apply to member balances and ledgers—layered, auditable, and built for real-world use.
Multi-factor sign-in
Passkeys, authenticator apps, and one-time recovery codes—password alone isn’t enough.
Secure sessions
HTTPS in production, hardened cookies, and safeguards on sensitive requests.
Role-based access
Permissions by role and staff-only admin, with trails suited to oversight.
Abuse resistance
Throttling and lockout after repeated failures to blunt guessing and stuffing.
