Password protection
Account passwords are stored as one-way salted derived hashes, not readable password text.
Security
Account security built into the service.
BrainGrid protects account credentials and authenticated sessions using server-side security controls.
Session protection
Browser sessions use HttpOnly, SameSite session cookies and server-side hashed session tokens.
Explicit account state
Account, session and entitlement state are persisted and checked on the server instead of being trusted from browser input alone.