Security at Personify Finance

Encryption in transit and at rest

Every page of Personify Finance App is served over HTTPS using TLS 1.2 or higher. Sensitive information you share — Social Security number, bank account details, income — is encrypted in transit using 256-bit SSL and stored encrypted at rest in our systems.

Account protection

Your Personify Finance borrower account is protected by:

• Unique password requirements — minimum length and complexity
• Two-factor authentication (2FA) — enabled by default, with codes delivered by SMS or email
• Session timeout — automatic logout after a period of inactivity
• Lockout protection — account temporarily locks after repeated failed login attempts
• New-device alerts — email notifications when your account is accessed from an unfamiliar device

Our internal security practices

Personify Finance App and its lending partners follow industry-standard security practices including:

• Role-based access controls — only authorized staff can access account data
• Independent third-party security assessments
• Secure software development lifecycle including code review
• Continuous monitoring for unusual activity
• Regular backups and tested disaster recovery procedures

Your security responsibilities

Security is a shared responsibility. Here's what every Personify Finance borrower can do to help:

• Use a unique password you don't reuse on other sites
• Keep two-factor authentication enabled
• Never share your password or 2FA code with anyone — Personify Finance support will never ask for them
• Only log in on devices you trust
• Avoid public Wi-Fi for Personify Finance account access
• Log out after every session, especially on shared devices
• Keep your phone and computer OS updated with security patches

How to spot a Personify Finance security threat

Phishing emails

Watch for emails that: direct you to log in via a link (type the URL yourself); ask you to "verify" your account; threaten account suspension; or come from addresses that look almost but not quite like the official Personify Finance domain.

Fake customer service calls

If you receive a call from someone claiming to be Personify Finance asking for your password, 2FA code, Social Security number, or an "upfront fee" — hang up. Call the official Personify Finance customer service number from the real site to verify.

Fraudulent lender impersonation

Scammers sometimes impersonate real lenders. A genuine Personify Finance representative will never require gift cards, wire transfers, or cryptocurrency to "activate" a loan.

Responsible disclosure

If you're a security researcher who has identified a vulnerability in Personify Finance App, please contact us through our contact form before any public disclosure. We appreciate responsible disclosure.