For over 30 years, logging into websites has worked the same way. You create a password, the website saves it, and you both cross your fingers it never gets stolen ...