Our Security Practices

Coins-e takes a comprehensive approach to security. Our experts have built in a number of measures to mitigate against any potential threats. We have also taken measures to ensure constant communication with our counsel for any compliance related issues and full monitoring of our reserves.

Below are some of our practices we take.


Coin Storage
  • 90% of deposits go into a cold wallet which has no connection to the internet
  • All wallets are encrypted.
  • Our cold wallets are broken down into 10 different addresses in different locations
  • ~10% are kept in hot wallets to keep up with operations

User Account Security
  • Two-factor authentication is available for account login, making deposits and withdrawals, ordering, and actions that can be performed using API keys.
  • Protection against leakage of user information: login or password recovery attempts will not reveal any account information.
  • PGP/GPG for external communication
  • Logs of all recent activity including I.P and location.
  • Global settings lock feature that, when enabled, prevents tampering of user account information by an attacker who has gained access to the account.

System Security
  • Our servers reside in an extremely secure location - with surveillance, guards and behind bars.
  • Encryption is standard on various types of data communications
  • We keep daily backups of all type of sensitive data
  • We use cloudflare to protect against DDOS attacks
  • Our staff has been reviewed with background checks and only executive access to sensitive information with proper logs in place

Legal Compliance

We are taking all necessary measures to be fully compliant. We have a counsel retained for any guidance and feedback necessary to securely operate in our jurisdiction.


What You Should Do

While our security practices go a very long way toward protecting your personal information and keeping your money safe, there are a few things we strongly recommend you do yourself in order to make your account as secure as possible.

  • Choose a long password with various numbers and characters
  • Setup 2FA to avoid any type of external losses. It's extremely important to do this as it makes it extremely difficult for malicious actors to gain access.
  • Setup PGP/GPG for any external communication with sensitive information Send your verification documents only via the form we provide, rather than via email or in a support ticket.
  • Set up two-factor authentication on the email account associated with your Kraken account.
  • Once you have your account settings settled, we recommend that you use the global settings lock, especially if you go on vacation or won't be able to monitor the email associated with your account for a period of time.

Guides

Shoot us an email if you have any questions: [email protected]

PGP Public Key

Below is the PGP public key used by Coins-e.com for signing outgoing email correspondence to users. Import it into your PGP/GPG enabled email client to verify the authenticity of signed email from the site.

Please note: this public key should only be used to verify the authenticity of automated, outgoing, signed emails sent to users from the Coins-e.com site. It should not be used to send any encrypted email to Coins-e.com .

Also available as a coins-e.asc file.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org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=oEGS
-----END PGP PUBLIC KEY BLOCK-----