Account protection
FalconJA uses HTTPS, password hashing, limited login attempts, and server-side session checks. You can enable optional authenticator-based multi-factor authentication from Account → Security → Multi-Factor Authentication. Save your one-time recovery codes securely.
Payment protection
Provider API keys stay on the server. Payments are confirmed by server-side provider checks, not browser redirects. FalconJA does not ask for your banking password, card PIN, or issuer authentication code in its own forms.
Your part
Use a unique password, keep your devices updated, and contact support if you notice unfamiliar activity. No online system can guarantee absolute security.