Security

Dart.cash implements 2FA as a core security measure to protect user accounts by requiring two distinct forms of identification.

• How It Works: A time-sensitive code is required in addition to the password.
• Benefits: Extra defense against phishing and brute-force attacks.
• Best Practices: Use app-based 2FA instead of SMS-based due to SIM swapping risks.

Supports apps like Google Authenticator and Authy for more secure 2FA.

• Implementation: Link via QR code; 6-digit codes refresh every 30s.
• Security Advantage: Offline, immune to SMS spoofing.
• Recovery Codes: Provided during setup—store them safely.

All Dart.cash communications are encrypted via SSL/TLS over HTTPS.

• User Verification: Look for "https://" and a padlock icon.
• Protection: Guards against MITM (man-in-the-middle) attacks.

Dart.cash does not store user assets—users retain full control via non-custodial wallets.

• Design: Assets stay in user wallets (hot or cold).
• Benefits: Eliminates central points of failure and large-scale hacks.
• User Responsibility: Users must secure their keys and follow best practices.

• Cold Wallets: Remain offline and never touched by Dart.cash.
• Hot Wallets: Users initiate transactions themselves; private keys not shared.
• Benefit: Reduced attack surface and user sovereignty maintained.

• Password Policies: Strong password enforcement.
• Phishing Protection: User education and URL verification.
• Software Updates: Regular patching and system updates.
• Transaction Verification: Manual verification and whitelisting.

• Seed Phrase Security: Store offline in secure physical form.
• Safe Internet Usage: Avoid public Wi-Fi; use VPNs.
• Backup Strategies: Maintain multiple offline backups in separate locations.

• 2FA Vulnerabilities: Can be phished—users must verify site authenticity.
• Non-Custodial Risks: Losing keys means no recovery—responsibility is on the user.
• Cyber Threats: Stay informed of evolving threats and mitigation practices.