Users with passwords must enter them. Users without passwords can temporarily use legacy email-only login.