Good to see you again.

• Kept on this machine

  Accounts live in a local file, not a third-party cloud.

• Hashed, never stored raw

  Passwords run through scrypt before they touch disk.

• Signed session cookies

  Every session is verified with an HMAC signature.