Security & Best Practices

This page is part of the official MyTwin product documentation.

Overview

MyTwin is designed with security and privacy by default. This page summarizes:

• platform security principles,
• authentication and 2FA,
• session management,
• what MyTwin does and does not do,
• user best practices.

Platform principles

• Minimal data retention
• No dangerous permissions
• User-controlled data lifecycle

Authentication

• Hashed passwords (bcrypt)
• Secure tokens and cookies
• Optional TOTP 2FA

Best practices

• Enable 2FA
• Use strong, unique passwords
• Keep your devices updated