Privacy and security
Same login as Joomla
Usernames and passwords are checked by Joomla in the usual way. The popup is only a different layout — not a different login system.
Tokens
Forms include Joomla’s CSRF token so submissions are protected the same as on your default login page.
HTTPS option
Enable HTTPS for form to submit login/logout using SSL when your site supports it.
Safe styling
Only validated hex colour values from the settings are used for CSS variables — your choices stay under your control.