Accounts
- Passwords stored only as one-way hashes
- Sign-in locked after repeated wrong attempts
- 2-step login with an authenticator app and one-time backup codes
- Store owners can require 2-step login for their whole team
- Changing your password or 2-step login signs out every other device