No password, no email, no session. Holding the object is the proof, and the object cannot be transferred — so it cannot be sold, lent, phished or taken.
A handle is a SocialAccount object on Sui that your address owns. It is your name here — @yourname — and the thing the contracts check before anyone can subscribe to you, tip you or unlock what you publish.
Registering does not make you a creator — that is a separate decision, and opening a vault comes later. An account on its own lets you follow, comment, subscribe and be paid back from a vault you support.
Your account is an object on Sui that only your address can hold. There is no password to forget, no email to confirm, and nothing here that can lock you out — the object cannot be transferred, by you or by anyone.
It writes your address into a shared registry on Sui and mints you an account object. Handles are unique, first come, and rejected rather than normalised — asking for Alice does not quietly give you alice. One account per address, enforced by the contract.