00Security
We design HeroRPC so that the keys controlling your money never pass through us.
With you
HeroRPC
No private key crosses the dotted line.
01What we protect
If you choose to create a premine wallet in the builder, the keys are generated in your browser with its built-in secure random number generator.
The private key is placed in a backup file you download.
It is never sent to our servers or saved in your browser storage. Only the address is kept in your order.
You get the logins to the servers of your chain. The keys that make blocks on proof of stake, authority, Tron and Solana chains, and the payout wallet of a mining pool, sit on those servers, and we keep no access to them.
There are no passwords to steal. You log in with a one-time link we email you. A login link works once and expires in 15 minutes; the link in your order email lasts 24 hours.
We store only a fingerprint (a hash) of each link and login session, never the link itself.
When you run a validator with us, we run the server. You stake from your own wallet, and your funds never pass through us.
02Money
Checkout tells you exactly what to send and where. The price is locked for 20 minutes while you pay. Our servers confirm every payment on the blockchain themselves and never trust what your browser says. Your order starts only after the payment is confirmed.
Checkout tells you what to send
The exact amount, the coin and the address.
The price is locked while you pay
The amount stays fixed for 20 minutes.
Our servers confirm it on the blockchain
They never trust what your browser says.
Your order starts
Only after the payment is confirmed.
Responsible disclosure
Email [email protected] with "Security" in the subject, the details and the steps to reproduce. Please give us reasonable time to fix the issue before sharing it publicly.
Subject: Security
