Create an account before opening the dashboard. Your password is hashed and never stored in plain text.
Account data is stored server-side. Login sessions use an httpOnly cookie.