No password to remember. Sign-in links are single-use, tied to your inbox and to the device that asked for them, and a forwarded link can't sign anyone else in. Sessions last 7 days in a secure, HTTP-only cookie.