Encrypted keys, secure sign in, and controls you manage.
Tradeify protects credentials, sessions, and account access at every layer, so you can connect a broker and automate with confidence. Your funds remain at your brokerage; we secure the software layer.
Broker API keys and sensitive credentials are encrypted using industry-standard AES-256 encryption at rest.
All communication between your browser and our servers is secured with modern TLS encryption.
Authenticator app two factor authentication is required for every account, including Google sign in.
Secure, stateless sessions using JSON Web Tokens. Tokens expire and refresh automatically.
Passwords are hashed with bcrypt using adaptive cost factors. We never store plain-text passwords.
Deployed on managed cloud infrastructure with isolated databases, encrypted storage, and access controls.
Here's how we keep your account secure from sign-up to every trading session.
Your password is hashed with bcrypt before being stored. Email-based identity verification is on the roadmap.
Credentials are verified server-side. On success, a signed JWT token is issued with a configurable expiry.
You paste your broker API key into the app. Keys are encrypted with AES-256 before being stored.
JWTs are validated on every API request. Expired tokens trigger automatic re-authentication.
Read our Privacy Policy for details on how we handle your data.