🔐 Security

Technical safeguards — and what you can do yourself.

What the platform does

• Passwords only as a bcrypt hash; optional two-factor and passkeys.
• Encrypted transport enforced; security headers; strict Content Security Policy.
• Rate limits against brute force and mass sign-up.
• Block, report, moderation; admin access requires two-factor and is logged.
• Safety centre: store an emergency contact, share "on my way / here".

What you can do

• Enable two-factor; use a strong, unique password.
• Choose public meeting spots, tell someone you trust.
• Block and report anything unpleasant.