Password is verified client-side and again by PHP on every write request.
In admin mode, every card gets edit and delete buttons. New or changed terms appear automatically in the correct A–Z sidebar group after saving.
Removing a tag also removes it from all existing entries.