Attempts are rate limited, and everything done from here is written to the audit log.
The password is hashed the same way a real signup is. Copy it now — it is never displayed again.