We store a hashed password and an httpOnly session cookie — never plaintext credentials. Your profile can then be reused for future quote runs and premium access.