Sign-in and payment security

Signing in to SerpMode is protected by a captcha, a limit on attempts and confirmation of a new device.

Signing in

  • On the sign-in page, you need to pass the «I’m not a robot» check.
  • After 3 wrong passwords, sign-in is closed for 4 hours.
  • When you sign in from a new device, the service asks for confirmation, which you have 5 minutes to give, and notifies you of the sign-in by email.
  • An account has one active session. When you sign in from a new device, the previous session ends: «One account, one device».
  • Your password is stored only as a hash: we do not know your password.

More about signing in and password recovery: «Sign in, log out and reset your password».

Payment

  • Payment is made on the page of the YooKassa payment service, which is PCI DSS certified.
  • The full card number and CVC are entered only there. They never reach us.
  • We store the card mask (first 6 and last 4 digits), its expiry date and the card network.

Emails and Telegram

  • Service emails come from noreply@serpmode.com.
  • Telegram notifications come from the bot @serpmode_notify_bot.
  • SerpMode never asks for your password or card number, either in emails or in Telegram. If someone asks for them in the name of SerpMode, do not reply and write to support@serpmode.com.

If you suspect a break-in

  1. Change your password: «How to change your password or email».
  2. Write to support@serpmode.com from your account email and describe what raised your suspicion.

If you get an email about a sign-in from a new device and you did not sign in, change your password right away.

See also

SerpMode