Security Policy

PikaPay is protected by two-step authentication. All transactions are verified by your PikaPay password as well as your Twitter ID. We authenticate your identity with both systems.

Your PikaPay password is encrypted, and we do not know it. We do not have access to your Twitter password, as this authentication is performed exclusively by Twitter. We require you to use unique and strong passwords for both PikaPay and Twitter. Both passwords should be completely different from one another, and should never be used in connection with any other service. Although we allow 8-character passwords, we strongly suggest you use at least 16-characters for additional safety.

You can increase your security by completing PikaPay’s account recovery options. This feature allows you to identify yourself as the owner of the account, but is not required. For additional security, Twitter provides its own login verification to prevent unauthorized use of your Twitter account.

We also observe rigorous physical security and safety measures. We have trained our personnel to enact process-related and personal security protocols, and work only with organizations who do the same.

PikaPay’s website is protected by 2048–bit SSL certificates. Sensitive data is encrypted when stored on disk, and is rendered inaccessible from outside PikaPay’s infrastructure. PikaPay’s network, hosting environment and servers are actively monitored and protected by technical safety measures, DMZ, VPN, VLAN and firewalls.

We are committed to continuous improvement of these security standards, Just write to [email protected] (PGP Key) for reporting any security issue.