A strong password and 2FA
Use a unique, complex password and enable two-factor authentication where it is available. End active sessions on devices that are not yours.
Home /Security
Technical security · /securityPlatform security
How XDBay protects accounts, data and operations. We combine account protection, safe credential handover and anti-fraud measures.
This section describes platform practices and recommendations for users. Features that have not launched yet are not described as live.
DEMO · #SEC-01
protectedAccount protection
Passwordunique
2FA / MFArecommended
Domainxdbay.com
Sessionsdevice control
Secretsnever share
Account protection
How to protect your account
Basic measures that close off most of the risk for a platform user.
Watch out for phishing
Check the xdbay.com domain before entering any data, do not follow suspicious links and do not install software at the request of unknown users.
Report anything suspicious
Report suspicious activity to support immediately and do not confirm transactions whose purpose is unclear.
Safe credential handover
Never send seed phrases, private keys, recovery codes or your main account password. Create temporary accounts, grant minimal permissions, enable MFA/2FA, limit access by time or IP and revoke it after the project. XDBay never asks for a seed phrase or a private key.
Access
Recommendations for handing over credentials
create separate temporary accounts
grant the minimum permissions required
use MFA or 2FA
pass secrets through a protected mechanism
limit access by time or IP
keep a log of granted permissions
revoke access once the project is finished
do not use real data in a test environment
Countermeasures
Fighting fraud
What is prohibited
Fake accounts and documents, fictitious projects, deals, ratings and reviews, taking payment outside the deal, phishing and malware, requests for seed phrases and keys.
How we respond
In case of suspicious activity the platform may request additional verification, temporarily restrict certain operations or take other measures under the user agreement and the law.
FAQ
Frequently asked questions
No. XDBay never asks for a wallet seed phrase or private key. Any such request is a sign of fraud.
Create a temporary account with minimal permissions, enable MFA, limit the access and revoke it once the project is finished.
Change your password, end sessions that are not yours, enable 2FA and contact support. Report vulnerabilities through the responsible disclosure section.
Related material
Found a vulnerability?
Report it responsibly through a protected channel — without using it to access other people's data or disrupt the service.