Security
This page describes confirmed DashyMoney practices for protecting your financial information.
DashyMoney offers email and password authentication, Google OAuth, and Apple Sign In. Passwords are processed with secure hashing — never stored in plain text. Sessions use tokens with server-side validation and support logout and revocation.
Every sensitive operation is validated on the backend. Access to financial resources requires authentication and appropriate permission in the corresponding workspace. Frontend visibility controls complement, but do not replace, server authorization.
Each workspace has an independent financial context. Data from one workspace is not accessible to users without membership and appropriate permissions. Shared workspaces respect permissions defined by the owner.
We treat financial data with minimization and care. The AI financial assistant uses only the context necessary for each query — it does not send indiscriminate access to system data.