Authenticator only · password disabled · 24-hour remembered sessions · closing or refreshing does not sign you out