My guess is that they have 2 passwords. One password for access to Yotta which is provided by the user and stored securely/irrecoverably (i.e. hashed, salted, a

My guess is that they have 2 passwords. One password for access to Yotta which is provided by the user and stored securely/irrecoverably (i.e. hashed, salted, and peppered - yum), and another password for actually accessing TreasuryDirect is generated and stored by Yotta.