How a saved login can reduce typo and phishing risk, plus the checks that still matter before every sign-in.