Magic link only - no passwords. Multi-factor authentication is required after first login for any access to client data.