Two-factor sign-in required to access the dashboard.
Protected by password + TOTP two-factor authentication, rate limiting, and hardened sessions.