Payments
Billing goes through Stripe. We do not store full card numbers. That is in the Privacy Policy.
Security
LoginScout security: on-device encryption, PIN unlock, and its limits
This page restates what Privacy, Help, and the encryption guide already say. We do not list SOC 2, ISO 27001, pentest badges, or insurance — those are not published here.
What we can honestly say
Temp mail and burners
Disposable inboxes store messages sent to addresses we issue. Burner numbers are purchased through 5sim; we keep order identifiers to show SMS and enforce quota.
What this is not
Not a guarantee against phishing, malware, or a stolen unlocked session. Lock the vault. Do not paste cookies or share logins you do not own.
Open questions
Independent audit reports are not published on this site. If that changes, this page should link the real report — not a placeholder badge.
How the vault is protected
Step 1
Vault items encrypt on your device
Your vault (logins, card notes, recovery details, and profile) is encrypted on your device with AES-256-GCM before it is saved to your account.
Step 2
A 4-digit PIN has limits
To sign you in, we store a check value made from your username and PIN. A 4-digit PIN is short, so someone with our database could guess it. There is no PIN-reset email.
Step 3
Every vault syncs encrypted
Free and paid vaults are saved to your account in encrypted form so they can sync. 2FA codes and quick notes are not in the vault; they are saved only on this device.
Step 4
Google convenience mode is not zero-knowledge
We store a random vault key and release it only to your authenticated Google session on this site.
Related reading
The blog post on local encryption is the longer explanation of PIN-derived keys and backups. Privacy is the legal version. Terms covers Premium and third-party providers.
Questions people ask
Is LoginScout zero-knowledge?
No. Vaults are encrypted on your device before they are saved, but we store a check value made from your username and 4-digit PIN, and Google convenience mode stores a vault key on our servers. So neither mode is zero-knowledge.
Do you have a bug bounty?
No public bounty program is listed on this site. Email hello@loginscout.com for security issues. Do not file a fake CVE page here.
Keep the identity with the login.
Create a free vault, then upgrade for a private temp mailbox and burner numbers when the library grows.