Security

Report a security problem

If you think you have found a security problem in HumanKey, tell us through the Security Reports form on our contact page. Describe what you saw and how to see it again. Do not access accounts or data that are not yours, do not disrupt the service, and do not put API keys, tokens or other people's personal data in your report. This page is not a permission to test the service. We do not run a bug-bounty programme.

The same contact details are published in machine-readable form in our security.txt.

Official channels

Our website is humankey.io and our service address is api.humankey.io. E-mail we send comes from a humankey.io address. Payments are made on the pages of our payment provider, which you open from your dashboard or from a link in an e-mail from us. We do not ask you to send your password or card details by e-mail or in a chat. If a message that appears to come from us asks you to, do not answer it, and let us know through the contact form.