How we protect your data, secure your social integrations, and ensure platform reliability.
All sensitive information, including API keys, bot tokens, and OAuth credentials for your connected platforms, is encrypted using industry-standard AES-256 before being saved to our databases. Even in the event of a breach, your connection credentials remain unreadable.
We provide standard App-based Two-Factor Authentication (TOTP) to secure your dashboard. This prevents unauthorized users from accessing your PostCrab account and sending malicious broadcasts to your audiences.
PostCrab tracks all major security events on your account. You can view your active sessions, see which devices are currently logged in, and instantly revoke access from unrecognized devices directly from your Security Settings page.
We do not use scraped or unofficial methods to post to your accounts. PostCrab integrates exclusively with official, sanctioned APIs (such as Telegram's Bot API and X's Developer API). This ensures your accounts are never banned for using unauthorized automation software.
If you are a security researcher and have found a vulnerability, please let us know. We take all reports seriously.
Contact Security Team