We protect your account in layers: stronger sign-in, encryption, alerts, session control and limited permissions. Here we explain each one, what we do and what you can do. No measure removes risk completely, which is why it matters that you look after your passwords and devices.
You can protect sign-in with a second factor: a temporary code from an authenticator app or a confirmation sent to your registered email. With the second factor on, knowing your password is not enough to enter the account.
We recommend turning it on from day one, and it is required to request withdrawals. If you lose your device, you can regain access with the backup codes generated when you enable the feature or, failing that, through the account recovery process described below.
2. Information encryption
Data travelling between your device and the platform is sent over TLS-encrypted connections. Personal and verification data is stored encrypted, with access limited to the people and systems that need it to operate.
Encryption covers the dashboard, communications with payment providers and backups. The infrastructure and security teams are responsible for managing the keys and renewing them periodically.
3. Protection against fraud and phishing
Legitimate messages from Swap Adipex Ai come only from the official domain and from [email protected]. We will never ask for your password, your verification codes or your API keys by message, call or chat.
You can set a personal security phrase that we include in the emails we send you: if a message does not carry it, treat it as suspicious. When in doubt, do not click links and write to us at the official address.
4. Sign-in notifications
Every time someone signs in to your account from a new device or location we email you a notice. The message shows the date, the approximate device and the detected city.
We also alert you to unusual activity, such as several failed attempts in a row or a change to sensitive details. If you do not recognise the sign-in, you can close sessions and change your password from the same notice.
5. Device and session control
In the security section of the dashboard you see active sessions with their device and last activity. You can revoke any of them with one click and close all sessions at once.
Inactive sessions close automatically after a period without activity, and that window is shorter on browsers we do not recognise. It is an extra barrier if you forget to sign out on a shared computer.
6. Account recovery
If you forgot your password or lost your second factor, you start recovery from the sign-in screen. We verify your identity with the account details and, when needed, with a document and a liveness check.
For safety, withdrawals are limited temporarily after a recovery and you are notified through every registered channel. That delay protects your funds if someone tried to impersonate you.
7. API key permissions
When you connect an exchange, keys are generated with specific permissions: reading balances, trading and, if the exchange offers it, withdrawing funds. We recommend creating the key with read and trade access only, and leaving the withdrawal permission off.
It helps to restrict the key by IP address if your exchange allows it and to revoke it from the exchange when you stop using the platform. Swap Adipex Ai does not need withdrawal permission on your exchange to analyse or to trade.
8. Audit history
Every relevant action is logged with date and time: sign-ins, exchange connections, strategy changes and changes to security settings. You can review that history in the dashboard.
The log helps you spot activity you do not recognise and lets us reconstruct what happened if you open a complaint. Only authorised staff can access it, for security and compliance purposes.
9. Incident support
If you suspect someone accessed your account, write to [email protected] or tell your personal manager. We can lock the account immediately to stop trading and withdrawals while we review the case.
After the lock, the case is escalated to the security team, which tells you the next steps through the channel you choose and asks for the verification needed to restore access. We stay in contact until the incident is closed.
Who handles what
Security is a shared responsibility: some measures are ours and others depend on what you do. This table summarises the split across the nine areas above.
Area
What we do
What you do
Two-step sign-in
Offer the feature and require it for withdrawals
Turn it on and keep the backup codes
Encryption
Encrypt data in transit and at rest
Use trusted devices and networks
Fraud and phishing
Communicate only from official channels
Check the domain and sender before clicking
Sign-in alerts
Notify you of new devices and unusual activity
React quickly if you do not recognise a sign-in
Sessions
Close inactive sessions
Review active sessions and close unknown ones
Recovery
Verify identity before restoring access
Keep your contact details up to date
API keys
Work without withdrawal permission
Create them with minimum permissions and revoke unused ones
Audit
Log relevant actions
Review the history regularly
Incidents
Lock the account and escalate the case
Tell us promptly and cooperate with verification
No system is invulnerable. Our job is to make attacking your account hard and to detect any attempt quickly; yours is to protect the details only you know. When both work, the chance of improper access falls a great deal, although it never disappears.
When a security alert reaches you, treat it as time-sensitive. Open the dashboard directly from your own bookmark rather than from the link in the message, check the session list, and close anything you do not recognise. If you find something odd, tell your personal manager right away: the sooner we lock the account, the less room there is for damage, and a lock can always be lifted once your identity is confirmed.
We also review our own controls regularly. When we find a weakness, we fix it and, where the change affects how you sign in or what you need to do, we tell you in advance by email and in the dashboard.
Habits that protect you
Use a password different from your email and social networks, ideally generated by a password manager.
Keep your operating system and browser up to date, and do not install extensions you do not need.
Do not sign in from public wifi without a secure connection.
Type the site address yourself or use your own bookmark instead of opening links received by message.
Check sign-in alerts as soon as they arrive: a delay of hours is enough for someone to act.
