OVEXLY
Create account

How Ovexly Protects Your Account: Security Features Explained

7 min read

Trust starts with security. Ovexly, operated by Ovexly Trading LLC, a company registered in Wyoming, USA, protects your account with several layers that work together, from the moment you open the site to the moment you withdraw. Here is each one, in plain words.

11 layers protecting your Ovexly account

  1. 1. Encrypted connection on every page

    All of ovexly.com runs over HTTPS with a trusted certificate, so what you send, from passwords to deposit details, is encrypted between your browser and our servers.

  2. 2. Passwords are never stored

    Ovexly keeps only a one-way bcrypt hash of your password. Nobody, including our staff, can read it, and it cannot be turned back into your password.

  3. 3. A sign-in cookie scripts cannot read

    Your session is kept in an HttpOnly cookie, which browser scripts cannot access, limited to the sign-in endpoints of the site.

  4. 4. Limits on sign-in attempts

    Sign-in and sign-up are rate-limited, which slows automated password guessing down to a crawl.

  5. 5. You control your devices

    The Devices section of your settings lists every device signed in to your account. Sign out any one of them, or all others at once, with a single click.

  6. 6. Password reset signs out everywhere

    When a password is reset, every existing session on the account is ended automatically, so an old login cannot linger on a device you no longer trust.

  7. 7. Sign in with Google

    Prefer not to manage another password? Sign in through Google’s own secure login with one tap.

  8. 8. Protected infrastructure

    Ovexly’s databases are not reachable from the internet; only our own application servers can talk to them. The admin console is separate and private.

  9. 9. Deposit addresses only inside your account

    Deposit addresses and QR codes are only ever shown inside your logged-in wallet. Ovexly never sends them by email, Telegram or WhatsApp.

  10. 10. Reviewed withdrawals and verification

    Withdrawals can be reviewed before they are paid, and identity verification is checked by our team, which protects your balance from anyone who gets hold of your login.

  11. 11. Audit trail

    Sensitive account actions, such as password reset requests, are recorded in an audit log, so any unusual activity can be traced.

Five habits that complete the picture

  • Bookmark ovexly.com and always sign in from the bookmark.
  • Use a unique password you do not use anywhere else, or sign in with Google.
  • Secure your email account too, since it is the key to password resets.
  • Check the Devices section now and then, and sign out anything you do not recognise.
  • Only send deposits to the address shown inside your own logged-in wallet.

FAQ

Is my Ovexly password safe?

Yes. Ovexly stores only a one-way bcrypt hash of it, sent over an encrypted HTTPS connection, so the password itself is never kept.

Can I see where my account is signed in?

Yes. Open Settings, then Devices, to see every signed-in device and sign out any of them.

Will Ovexly ever ask for my password?

Never. Ovexly will not ask for your password or one-time codes by email, chat or phone. Anyone who does is not Ovexly.

Who operates Ovexly?

Ovexly Trading LLC, registered in Wyoming, USA. See About Ovexly.

Related Ovexly guides

Trade with confidence: create your free Ovexly account.