Imagine you are creating a login system for a web application. To ensure the security of user credentials, which of the following methods would be the best practice?

Using HTTPS with secure cookies ensures data transmission security, protecting user credentials. Storing passwords in plain text files is highly insecure. Weak encryption is also insufficient. User-friendly passwords, while a good practice, do not directly ensure security; the infrastructure does.