Your site, your data and your panel protected every day, every night.
- HSTS · 2 years
- bcrypt · 12
- Nightly backup at 01:30
- 7-day lock
- Weekly restore test
Your site and your visitors, on a locked line.
Our site, the customer sites on octofly.io and the panels run on HTTPS only. Browsers are told to connect only over an encrypted connection for 2 years.
cannot be downgraded to an unencrypted version
Not even we can see your password.
Your password is never stored in plain text; it is hashed with bcrypt at a cost factor of 12. A random salt is added to each password, and it cannot be reversed.
bcrypt · 12
An encrypted backup every night at 01:30.
The database and uploaded files are encrypted every night and sent to a separate provider's storage. The key that decrypts them is not kept there. Backups are kept for 30 days; each backup is locked for its first 7 days: it cannot be deleted or overwritten.
7-day lock
"We have a backup" isn't enough. We test it every week.
Every week, the latest backup is automatically restored to an empty database, and we check that the tables and record counts match. If something goes wrong, we get an alert.
Restore · tables matched
Make your login one step stronger.
You can turn on two-step login from the Settings page in the panel. When you log in with a passkey, only the public key is kept on our server; your fingerprint never leaves your device. We keep only a hash of your recovery codes.
Last updated: