If you know what the user's password is, then you could potentially be liable for an improper access. This liability is is impossible if you have no way of kno

If you know what the user's password is, then you could potentially be liable for an improper access. This liability is is impossible if you have no way of knowing what that password might be, even if things you do know like 2FA codes are used with something only the user would know.