Strong passwords, stored safely
Passwords need at least 8 characters with an uppercase letter, a lowercase letter, a number and a symbol. We never store your password itself, only a one-way bcrypt hash of it.
Security
How Kanakkedu protects your account.
Your books hold your family's money. These are the protections built into every account, and a few habits that keep it safe.
Two-step sign-in for everyone
Every account signs in with a password and a code from an authenticator app. You also get single-use recovery codes in case you lose your phone.
A PIN for the most private parts
Bank account balances, PIN-locked books, investments, reports, backups and the financial year summary ask for your Kanakkedu PIN. An unlock lasts 10 minutes.
Wrong guesses are stopped
Five wrong passwords lock sign-in for 15 minutes. Five wrong PINs lock the PIN for 15 minutes. Authenticator and email codes are limited the same way.
Sessions that end themselves
Each sign-in lasts at most 7 days, then you sign in again. If a copied sign-in token is ever reused, that session is ended at once. Changing or resetting your password signs out every device.
Email you can trust
New accounts confirm their email with a 6-digit code. A change of sign-in email is confirmed with a code sent to the new address, and the old address is told about it.
Amounts hidden on request
One tap hides every figure on your overview, handy on a shared screen or in a public place.
Sharing you control
Share a book with view, add-entry or edit access, and change or remove it any time. Each shared book keeps an activity log of who added, changed or deleted an entry.
Backups checked before restore
Create backups yourself or schedule them daily, weekly or monthly. Every backup is checked before it is restored, and a safety copy of your current data is made first.
Deleting means deleting
When you ask to delete your account, you confirm it and get a 30-day grace period to change your mind. After that, your account and records are permanently removed.
Good habits
Keeping your account safe
- Kanakkedu will never ask for your password, PIN or authenticator code by phone, email or chat.
- Keep your recovery codes somewhere offline, such as printed in a safe place.
- Use a PIN that is not your birthday, phone number or bank PIN.
- Only share a book with the access a person needs. View-only is often enough.
- Sign out on computers that other people use.
Report a problem
Found a security issue?
Please tell us privately at security@kanakkedu.online with the steps to reproduce it. We will reply, keep you updated while we fix it, and credit you if you wish. Please do not access other people's data or disrupt the service while testing.