Mimir

Your twin, and the only place it gets written.

Passwords are hashed with PBKDF2-SHA256. Sessions last 30 days. Run this behind TLS — the session token is a credential.