Security

This page summarizes how TapBee's current product protects account access and separates public profile information from account information.

Account Protection

Passwords are hashed before storage. New registrations must verify their email before initial account access. TapBee also provides email-based password recovery and temporarily limits repeated failed authentication attempts.

Sessions and Access Controls

Protected areas and requests require authenticated access. TapBee performs authorization checks before allowing account or administrative actions.

Administrative Access

Administrative login includes an additional verification-code step by email after password authentication. This additional step applies to administrative access; it does not mean standard user accounts include multi-factor authentication.

Public and Private Data

TapBee profiles are designed to be public and display creator-selected profile information and enabled links. Account credentials are not part of the public profile response. For more detail, read our Privacy Policy and Analytics & Tracking.

Security and Privacy Contact

To report a security or privacy concern, email support@tapbee.io. No system can guarantee absolute security.