Log in Sign up
Platform Security

Your account. Your control.

We implement layered authentication, isolated database access, and cryptographic safeguards to protect your personal identity and balance integrity.

A secure architectural setting with controlled access and disciplined design
Operational Defense

Verified security principles.

Here is exactly how Trust Back protects your account, step by step.

Account Authentication

Passwords are hashed using industry standard Bcrypt with cryptographic salts. Raw credentials are never stored or logged in plain text.

Email Verification

Every account registration and security change requires confirmation through an individual, time-limited verification token dispatched to your inbox.

KYC Document Verification

Tier upgrades require manual review of legal government identification and proof of residence to prevent fraud and account impersonation.

Transaction PIN Authorization

Crucial balance movements, including withdrawal requests and peer-to-peer transfers, require separate authorization via your personal security PIN.

Privacy & Data Isolation

Customer balances and transaction ledgers are isolated in dedicated database tables. We never monetize or distribute personal profile data to third parties.

Session Inactivity Timeouts

Active sessions expire automatically following prolonged periods of inactivity, preventing unauthorized access on shared or public devices.

Clear Demarcation

Current vs. planned security controls.

We pride ourselves on direct honesty. Here is our breakdown of active security layers versus features currently in engineering rollout.

Active Today

  • ✓ Bcrypt hashed user passwords & secure session tokens
  • ✓ Double-entry transaction audit journals with strict foreign keys
  • ✓ Manual administrative review queue for high-value requests
  • ✓ Transaction PIN verification on balance deductions

In Roadmap Engineering

  • • FIDO2 / WebAuthn hardware security key authentication
  • • Automated anomalous IP geolocation login notifications
  • • End-to-end encrypted messaging channels for compliance inquiries
Action Guidance

Reporting suspicious account activity.

If you notice an unexpected transaction or suspect your credentials have been compromised, act immediately.

Step 1: Change Your Password

Immediately log in to your account and update your password under Account Settings. This invalidates existing device sessions.

Step 2: Update Your PIN

Reconfigure your secondary transaction PIN code in the dashboard to ensure pending balance actions cannot be executed.

Step 3: Alert Support Team

Contact our support desk immediately via our Help portal. An administrator can place a temporary security hold on your wallet.

Financial software engineered for accountability.

Register your individual account today and enjoy direct, transparent ledger control.