VisitCard takes security seriously:

• Encryption: all communications are encrypted (HTTPS/TLS).
• Passwords: hashed with bcrypt, never stored in plain text.
• Sessions: HttpOnly + SameSite=Strict cookies to prevent XSS and CSRF attacks.
• Rate limiting: protection against brute-force attacks on login.
• Email verification: mandatory at registration.

Tips: use a strong, unique password. Never share your credentials.