Identity
Passwords use memory-hard Argon2 hashing. Email verification and password recovery use expiring six-digit codes with attempt limits. Desktop sign-in uses PKCE and one-time authorization codes.
Meetora Company
Security
Protection built into every layer.
Application boundaries
The Electron renderer is sandboxed with context isolation, restricted navigation and a narrow IPC bridge. Server authorization is enforced for every private room action.
Release integrity
A SHA-256 hash detects changes relative to a trusted expected hash; it does not identify an executable's publisher or prove the program is safe. Unsigned builds must not be described as verified-publisher releases. A redesigned application-bounded updater remains subject to separate release validation.
Responsible disclosure
Report suspected vulnerabilities to security@meetora.me with steps to reproduce, without including passwords, tokens or other users' data. The service operator must confirm that this mailbox is available. No system is guaranteed immune to compromise.