Security

How your account, balance and Steam account are protected, and what to watch for yourself.

What we do

• The site runs on HTTPS only, with HSTS on.
• Passwords are never stored in plain text: they are hashed with Argon2id.
• You can sign in with a passkey (fingerprint, Face ID), Telegram or Google.
• See your active sessions in Settings → Security and sign out of all of them there.
• Topping up your balance never asks for a card number, expiry date or SMS code on the site.

We never ask for

The admin and support will never ask for your site or Steam password, Steam Guard code, SMS code or card CVV. Anyone asking for these in the admin's name is a scammer. The official admin is @adolfjon.

Official addresses

• Site: adolfjon.uz, developer API: dev.adolfjon.uz
• Telegram bot: @adolfjon_bot, channel: t.me/adolfjonofficial
• Other domains and bots are not official. Check the address before you open a link.

API keys

Never share your API key or put it in public code. Turn on the IP allowlist in the Dashboard. If a key leaks, revoke or roll it right away.

Found a vulnerability?

If you find a security problem, tell us before you publish it: @adolfjon or a support ticket. Do not touch other users' data and do not disrupt the service. We review every report.