Have a limitation in the login, wat if login fail and try atack by a infinite loop Save password ENCRYPTED Multifactor authentication Force user to use strong password