How is my data protected?

Passwords are hashed with scrypt, sessions are random tokens stored hashed, connected-account tokens are encrypted at rest, all traffic is encrypted, the database accepts connections only from the application server, and backups run nightly.

Part of Account and security in the Serpified knowledge base. Answers are kept current with the product; if one is out of date, tell us and we fix it.