At the end of the day,our goals are simple: safety and security.
Secure. Standard. Scalable. Safe. Easy. Transparent. Tested
Encryption of sensitive data and communication
Please Note - BuyUcoin User Passwords are encrypted and hashing, along with the salting algorithm that means even we cannot login as you.
All the requests are encrypted with AES-256 and protected by CSRF Token Authentication for fraudelency checking.
BuyUcoin's infrastructure for storing, decrypting, and transmitting data runs in separate hosting infrastructure, and doesn’t share any credentials with BuyUcoin's primary services (exchange, wallet, etc.).
95% of customer funds are stored offline
Offline cold storage is a preferred and standard method of protection of cryptocurrencies against theft or loss. We distribute cryptocurrency geographically in safe vaults in confidential locations.
The cold storage wallets are kept in geographically isolated locations at anonymous combinations of latitudes and longitudes.
The funds in offline cold storage require manual intervention by several members of our Board of Directors and Executive Desicion.
Our platform only allows less than 5% of our user's crypto assets to be accessible in hot wallets for trading exchange on our orderbook.
HTTPS and HSTS for secure connections
BuyUcoin forces HTTPS for all services using TLS (SSL), including our public website and your Account.
Buyucoin.js is served only over TLS. BuyUcoin’s official libraries connect to BuyUcoin servers over TLS and verify TLS certificates on each connection.
We use HSTS to ensure browsers interact with BuyUcoin only over HTTPS.
Security is one of the biggest considerations in everything we do
BuyUcoin continually updates the end-to-end security measures, improving auditing processes, and reducing the 'attack surface' of our infrastructure. Please note that we cannot disclose too many details of the security measuresimplemented on the platform for our user's security and proprietary technology reasons. If you have any questions after reading this, or encounter any issues, please let us know.
User Account Protection
work-section
