How we protect your data — without the vague reassurances

Every website writes "your security matters to us". That sentence carries no information. Here is what we actually do instead, so you can judge for yourself.

We do not have your password

Your password is not stored in our database. What's stored is the output of a one-way function (bcrypt) that cannot practically be turned back into the original.

The practical consequence: not even we can see your password. If someone stole a copy of our database tomorrow, there would be no password in it to read. It's also why, if you forget it, we can't send it to you — we can only let you set a new one.

Reset links work the same way

When you use "forgot my password", a random token is emailed to you. What we keep is only a hash of that token, not the token itself.

That link:

• Works exactly once. It dies on use.
• Expires after an hour.
• Is issued a limited number of times per hour, so the form can't be abused to flood somebody else's inbox.

Signing out actually signs you out

On many sites, "sign out everywhere" only clears the cookie in the browser you're using; the rest stay valid until they expire on their own.

Here, every session carries a generation number. When you change your password or hit "sign out everywhere", that number moves forward and every earlier session becomes invalid at that instant. Not in a few days — that second.

Nobody gets unlimited guesses

Failed sign-in attempts are counted, and after a few tries that address is locked for a while.

One detail that matters: the limit applies to the email address, not the IP. An attacker cycling through hundreds of proxies walks straight past an IP limit, but still has to do their guessing against that one address.

The ledger gets checked

Every movement of money has two sides. An automatic check confirms that the sum of wallet balances still agrees with transaction history. If a number stops adding up, it gets noticed.

Backups are tested, not counted

Data is backed up daily to three separate places. More importantly, those copies are checked to confirm they can actually be restored — not merely that a file exists. An empty backup nobody ever tested is worse than no backup, because it makes you feel safe.

What isn't finished

Let's be straight: we are a small, early company, not a bank with a security department. We have not had an independent third-party security audit. If you find a problem, write to info@moneyharbor.net — we will take it seriously and thank you for it.