Portal accounts are provisioned per client organisation and require multi-factor authentication.
Six digits from the authenticator app you enrolled during onboarding.
Every portal session is logged. Access and any record you open appear in the audit trail your organisation can export.