Security

How the production build is being designed to protect accounts and sensitive family administration.

Account security

• HTTP-only signed session cookies.
• Password hashing using scrypt with a unique salt.
• Optional authenticator-app two-step verification.
• Email verification and time-limited password-reset links.
• Same-origin checks for cookie-authenticated changes.

Document security

• Private per-person permissions enforced on the server.
• Strict file-type/content checks and blocked executable/script formats.
• Optional private ClamAV malware-scanning service.
• Application-level AES-256-GCM encryption before production object storage.
• Files are downloaded as attachments rather than trusted as executable web content.

Infrastructure

The production configuration is prepared for PostgreSQL plus S3-compatible private object storage. Readiness checks refuse to describe an incomplete production configuration as ready.

Auditability

Important account, sharing, document and sorting actions create structured audit events without intentionally copying document contents into the audit log.

Report a problem

Please contact hello@illsortit.app. Do not email passwords, authenticator codes or highly sensitive documents to support.