Step 1 of 2 · username and password
After 5 wrong attempts the account is locked for 15 minutes.
No public sign-up. Accounts are created by the admin on the server.