Hash passwords, manage sessions, issue and verify JWTs, and integrate OAuth-style login flows. Build authentication that protects accounts without storing secrets carelessly.