Encryption and access
- All traffic is encrypted (HTTPS with HSTS).
- Passwords stored only as a hash (scrypt); secrets encrypted with AES-256-GCM.
- Two-step verification for your team and identity confirmation before sensitive actions.
- Sessions expire when idle and can be closed from any device.