Security Tips

How DalRoti protects your account

Encryption in transit: the website, app and API are served only over HTTPS (TLS), with HSTS.

Broker credentials encrypted at rest: broker API secrets, access tokens and passwords you connect are stored encrypted on our servers and are never shown back in full.

Two-step sign-in: every sign-in needs your password plus a one-time code; repeated wrong attempts are slowed down and locked out.

Role-based access controls: every request is checked on the server, so one customer can never see or act on another customer's orders, accounts or data.

Web sessions are kept in secure, HttpOnly cookies that page scripts cannot read, with protection against cross-site request forgery; signing out or changing your password ends the session on the server.

Turn on two-factor authentication

Enable 2FA in your account security settings. Use an authenticator app where available and keep backup codes offline.

Never share your OTP

DalRoti staff will never ask for your password, OTP or 2FA code by phone, email, chat or social media. Anyone asking is trying to take over your account.

Watch out for phishing

Always check that you are on dalroti.ae before signing in. Do not click links in unexpected messages, and be wary of offers promising guaranteed returns or "account recovery" services.

Protect your broker API keys

Create keys with only the permissions DalRoti needs, never enable withdrawals, rotate keys regularly, revoke keys you no longer use and never paste them into chats or public places.

Use a dedicated IP where your broker requires it

Many brokers let you whitelist a static IP for API access. A DalRoti dedicated IP lets you restrict your keys to that address, so a stolen key is useless elsewhere.

Keep your devices safe

Use a strong unique password, keep your operating system and browser updated, lock your phone and sign out on shared computers.

Report problems quickly

If you notice unknown logins, orders or settings changes, change your password, revoke broker keys and contact support@dalroti.ae immediately.