Security & Audit Architecture
How KanakkuBook protects community financial records, user credentials, and audit verification trails.
bcrypt Password & PIN Encryption
Passwords and 6-digit Security PINs are encrypted using salted bcrypt hashing algorithms. Plaintext credentials are never saved or transmitted to databases.
HTTP-Only JWT Cookie Sessions
User login tokens are transmitted exclusively via HTTP-only, SameSite-strict cookies, preventing client-side script tampering or XSS attacks.
Immutable Audit Verification
Every expense entry requires verification approval by assigned event auditors. Verified entries generate tamper-proof receipt documents.
Encrypted TLS 1.3 Database Connections
All MongoDB database queries utilize TLS 1.3 encrypted connection pools managed securely through centralized server wrapper lib wrappers.
Reporting Security Vulnerabilities
KanakkuBook takes platform security seriously. If you discover a potential vulnerability or security concern, please notify our engineering team immediately at kanakkubook01@gmail.com.