Supabase sends a single-use magic link. No password is stored by this application.
The anonymous Supabase key remains server-side under its existing exact environment-variable name.