Security

Last updated: 2026-05-18

How We Protect Your Account

Password hashing — Your password is hashed before storage. We never see or store it in plain text.

Encrypted connections — All data between your browser and HokAI is encrypted in transit via HTTPS.

Session tokens — Authentication tokens are stored in your browser. Signing out clears them.

Use a strong password — At least 8 characters with a mix of letters, numbers, and symbols. Don't reuse passwords from other sites.

Don't share credentials — We'll never ask for your password by email. If you get a message asking for it, it's not from us.

Sign out on shared devices — If you're on a public or shared computer, sign out when you're done.

Report anything suspicious — If something looks wrong with your account, email info@hokai.io right away.

Go to Settings and open the Security tab. Use the change password flow. You'll need your current password to set a new one.

Two-factor authentication isn't available yet. We'll announce it when it is.