This replaces the one-off password. Eight characters or more.
Client details are only ever shown to a signed-in staff account.