I know this might be a pain in the ass to implement, but it also helps prevent people from being hacked (especially staff)