Password hashing, firewalled servers and additional confirmation inspections for delicate changes put cover in the account