This replaces the one-off password. Eight characters or more.
Locked out? Use a recovery code
Client details are only ever shown to a signed-in staff account.