No password. Sign in with a passkey or a one-time email link. Agents get their own tokens under a mandate you set in Settings, never your session.