Of course! Security is our NUMBER ONE priority too. Because without adequate security, you cannot run an exchange. We have carefully designed our exchange scripts to get higher security following best industry practices. Let us try to explain to you some.
The default version of the script comes with the following security measures.
Google recaptcha for all members/admin logins (Google Recaptcha V2 - I’m not robot style).
Two factor authentication using Google Authenticator - For both admin/member, 2FA can be enabled (using google authenticator). If this feature is enabled by the user, the time based 2FA to be entered from Google authenticator installed on their phone to allow them to log in. Google authenticator is one of the most trusted 2FA authentication software.
IP address based restrictions - Users can black list/white list IP Addresses, when a user is accessing from a new IP he’ll be blocked by default, unless he approves the IP addresses using the approval link sent to his/her email. This makes sure that even if the password is known to a hacker somehow he can’t access the user account without getting access to the user email too.
Automated and easy movement of excess cryptocurrency assets to the external/hardware wallet of your control.
HTTPS ready (pretty standard, however, we just mentioned it.)
Member KYC Verification to make sure no user can submit a withdrawal request without verifying their identity.
Please note that security is ultimately your responsibility. We are providing you a lot of tools which you can use to enhance the security close to a perfection level if those features are used wisely.