Security at DebtFreely

We treat your financial data with bank-level security practices.

Encryption

All data in transit uses TLS 1.3. Data at rest is encrypted with AES-256.

Authentication

Passwords are hashed with bcrypt. Optional multi-factor authentication via TOTP. Leaked-password protection blocks credentials known to have appeared in public breaches.

Bank connections

We use Plaid for optional account linking. Plaid handles bank authentication directly — DebtFreely never sees, stores, or transmits your bank login. Access tokens are stored encrypted and accessible only to server-side functions.

DebtFreely provides general educational information about debt payoff strategies. It is not financial, legal, or tax advice. Consult a qualified professional for advice specific to your situation.