Users are verified by login and password pair over an SSL encrypted link. Passwords are always encrypted before storing. Two-factor authentication is currently in the planning phase for release in 2021.