How are passwords stored at Valid Email Checker?

Quick rundown of how we handle credentials:

• Passwords are hashed, not stored. Supabase Auth handles hashing with bcrypt — even our database administrators cannot read your password.
• Sessions use signed JWTs with short refresh windows.
• Sign-in uses HTTPS only. No password ever leaves your browser in plaintext.
• [2FA](how-to-enable-2fa) is available for an additional layer.
• Single-active-session model means a stolen session token gets invalidated as soon as you sign in legitimately again.

If you reuse passwords across sites (don't), one breach elsewhere puts every other account at risk. A password manager + 2FA on this account closes that gap.