Industry Standards

We’ve built our app’s security from the ground up following the industry standards of OWASP (Open Web Application Security Project). They act as a seal of trust, instilling confidence and ensuring a safe, seamless user experience. ivault users also have complete control over their assets and data through a non-custodial wallet. Together, this guarantees maximum security for our users and shows our commitment to protecting each and every one of them.

How ivault follows OWASP standards:

• Cryptographic standards secure user data – including private keys for non-custodial wallets – so it can’t be read or manipulated if intercepted.

• Insecure Direct Object References (IDOR) prevention validates, filters and cleans all data inputs to prevent unauthorized access of user wallets and other resources.

• Secure authentication and session management prevents unauthorized access.

• Cross-Site Scripting (XSS) and injection attacks protection validates and cleans all data inputs and outputs to prevent attacks, such as stealing user keys or other sensitive information.

• Secure and up-to-date configuration of our servers, databases, and other systems minimize the risk of a security breach.

• Regular vulnerability checks and updates of our third-party libraries, frameworks, and components mitigate any potential security risks.

• Avoiding unnecessary redirects and forwards – or validating them – helps to prevent phishing attacks.

We also have extra security measures for our non-custodial wallets:

• Secure key storage: Users’ private keys are encrypted and securely stored on their device – not on our servers.

• Biometric authentication: Optional fingerprint or face recognition or accessing the wallet.

• Backup and recovery: Users can recover their assets if they lose access to their device.