Sign in, email checks, and 2‑step safety