First login requires an OTP generated by the admin CLI.
Passwords are hashed and never stored in plain text.