VisitCard takes security seriously:
- Encryption: all communications are encrypted (HTTPS/TLS).
- Passwords: hashed with PBKDF2-SHA256 (unique salt per user), never stored in plain text.
- Sessions: HttpOnly + SameSite=Strict cookies to prevent XSS and CSRF attacks.
- Rate limiting: protection against brute-force attacks on login.
- Email verification: mandatory at registration.
Tips: use a strong, unique password. Never share your credentials.