Security
Last updated: September 24, 2026
Security Vault is built with a security-focused architecture and layered controls. The current product includes the protections described below. View the Security Vault product overview.
- Password hashing and encrypted vault data handling
- Encrypted secure-file storage and protected file access
- Email ownership verification for new accounts
- Two-factor authentication and recovery controls
- Biometric unlock on supported mobile devices
- Vault auto-lock and manual vault locking
- Active-session management and logout/session revocation
- Security activity and account alerts
- Rate limiting and abuse controls
- HTTPS for production web/API communication
Responsible Disclosure
If you identify a potential security vulnerability, please report it to support@turubatechnologies.com. Please provide reproducible details and avoid accessing, changing, or deleting other users' data. Never send passwords, recovery codes, API tokens, vault tokens, encryption keys, or other secrets in an email.
Security Limitations
Security measures reduce risk but cannot guarantee that an internet-connected service will never be compromised. Users should use strong unique credentials, enable available authentication protections, keep recovery information secure, and keep their devices updated.