Hosted RootOS uses Supabase Auth. Your password is sent directly to Supabase, not to the RootOS application server.