Security

• No account connections. CyberLiphe never asks for your Google, Outlook, bank or email logins, so there are no tokens for anyone to steal from us.
• Screenshots are not kept. A pasted image is read for its text and then discarded; only the fields you confirm are saved.
• Codes and passcodes are encrypted on your device with AES-GCM using a key derived from your PIN. The PIN never leaves your device and we cannot read the contents.
• Card details never touch our servers. Checkout and billing run entirely inside Stripe.

• Traffic is served over HTTPS.
• Passwords are stored only as one-way hashes by our authentication provider.
• Your entries are scoped to your own account at the database level, so one member's data is not reachable from another member's session.

• Choosing a strong, unique account password.
• Keeping your vault PIN somewhere safe offline — a forgotten PIN cannot be reset or recovered by anyone, including us.
• Locking the device you use CyberLiphe on.

If you believe you have found a security issue, please use our contact form with enough detail to reproduce it, and give us a reasonable chance to fix it before sharing it publicly. We will not pursue anyone who reports in good faith and does not access other people's data.

We do not claim any certification, audit or regulatory compliance status. No online service can promise perfect security, and we do not. Please keep your own copies of anything you cannot afford to lose.