Brave has launched Brave Accounts, a new account system that gives users access to its new Email Aliases feature and future Brave services. The company said the system uses the OPAQUE encrypted authentication protocol, allowing users to prove they know their password while the server also proves its legitimacy, without the password leaving the user’s device. Brave said that even if its database were breached, attackers would still need the server key and would not be able to crack passwords in bulk. The company added that OPAQUE does not prevent phishing attacks, so users still need strong passwords. A future version of Brave Sync will support pairing with Brave Accounts, removing the current QR code pairing process while keeping an accountless sync option available.