Password authentication is dangerous and difficult to maintain securely. Instead I use Magic Links (simple emails sent to you, with a link to authenticate or create an account). I will NEVER bother you with marketing emails.