Security

Protecting your account and data is a priority. Here is an overview of the safeguards we use and how you can help keep your account safe.

Encryption in transit

All traffic is served over HTTPS/TLS so data moving between your device and StockRomeo is encrypted.

Secure authentication

Passwords are hashed, never stored in plain text, and sessions use signed, time-limited tokens.

Least-privilege access

Access to systems and data is restricted to what is strictly necessary and is audited.

Hardened headers

The app sends protective response headers (frame, content-type, referrer, and permissions policies) on every request.

Keeping your account safe

Use a strong, unique password that you do not reuse on other sites.
Never share your password or one-time codes with anyone — StockRomeo staff will never ask for them.
Be cautious of messages claiming guaranteed profits or asking you to move money; StockRomeo is educational and never asks you to transfer funds.
Always check that you are on the official StockRomeo domain before signing in.

Reporting a vulnerability

If you believe you have found a security issue, we want to hear from you. Please report it responsibly through our contact page with enough detail to reproduce the issue, and give us reasonable time to investigate before any public disclosure. We appreciate the security community's help in keeping users safe.

Loading market data...