Security
Encryption, permissions, and security best practices.
ORKA takes security seriously. Your data and funds are protected by multiple layers of security.
Data Encryption
All data is encrypted:
- At rest: AES-256 encryption for stored data
- In transit: TLS 1.3 for all communications
- Database: Encrypted backups with key rotation
Authentication
ORKA supports multiple authentication methods:
- Email/Password: Standard authentication with bcrypt hashing
- Google OAuth: Single sign-on with Google
- API Keys: For programmatic access
- Freighter: Wallet-based authentication
Access Control
Permissions are managed at the workspace level:
- Role-based access: Owner, Admin, Member
- Project-level permissions: Assign specific projects to team members
- Client isolation: Each client's data is completely separate
Blockchain Security
Stellar transactions are secured by:
- Multi-signature: Releases require both client and ORKA approval
- Smart contracts: Escrow rules are enforced on-chain
- Immutable records: All transactions are permanently recorded
Warning
Never share your API keys or seed phrases. If you suspect a security breach, rotate your keys immediately in workspace settings.
Best Practices
- Enable two-factor authentication
- Use strong, unique passwords
- Regularly review team member access
- Monitor activity feed for suspicious behavior
- Keep your Freighter extension updated
Was this page helpful?
Your feedback helps us improve.