Security, in practice.
Last updated 19 October 2026
How to protect your workspace and report a security concern.
Account protection
Kartfern supports password-based sign-in and passkeys. Sign-in codes expire and are subject to request and verification limits. Use a unique password, register passkeys only on devices you control and review staff access as your team changes.
Access and sensitive information
Permissions help limit what staff can do in a workspace. Passwords are stored as hashes. Selected integration credentials are encrypted in storage. These controls reduce risk; they do not make any online service immune to security incidents.
Payments
Connected payment providers handle payment authorisation and sensitive payment credentials. Verify the destination before paying and do not share bank passwords, card security codes, UPI PINs or sign-in codes with anyone claiming to offer support.
Report a vulnerability
Email support@kartfern.com with the subject “Security report”. Include the affected URL, a description, safe reproduction steps and the potential impact. Redact personal information and credentials. Do not access other users’ records, interrupt service or publish sensitive details while a report is being reviewed.
If your account may be compromised
Change your password, review staff access and contact support from your registered email. If payment credentials may be affected, contact your payment provider too. Do not send passwords or codes in a support message.