It's recommended in the Bluesky docs (and generally) to use OAuth rather than username/password login.