Access is by invitation of the project owner and limited to approved email addresses. There is no password: every sign-in is a link by mail, and the session then lasts 30 days.