Security
Security at every step.
Email verification, manual account approval, encrypted connections and strict server side checks protect every account. Staff access uses multifactor authentication and every sensitive action is logged.
Verified registration
Every member confirms their email with a one time code, and our team reviews each application before the Covee Private account opens.
Secure passwords
Passwords are handled by our authentication provider and stored only as salted hashes. We never see them.
Protected sessions
Sessions use secure, HTTP only cookies over encrypted connections. You can sign out of every device at once.
Abuse protection
Repeated sign in attempts, code requests and lookups are rate limited to stop automated attacks.
Complete transaction records
Every deposit, transfer and withdrawal is recorded. Records are never edited or deleted. Corrections appear as new, visible entries.
Accountable staff
Staff need multifactor authentication and role based permissions. Every sensitive action is written to an audit log.
We will never ask for your password or verification codes, including in live chat or by phone.
Report a concern